GRC Analyst: ISO 27001, Risk & Compliance

Brooks Laboratory Automation Solutions; Johor; On-site; MYR 120,000 - 180,000; Full time

Job summary

Brooks Automation is seeking a Governance, Risk & Compliance (GRC) Analyst to advance our ISMS, regulatory readiness, and customer security posture. You will work with the CISO and stakeholders across IT, Legal, HR, and Quality to translate frameworks into operational controls and measurable improvements.

The role requires hands-on experience with ISO 27001, audits, and various regulatory requirements, including NIST CSF, GDPR, and CRA.

Qualifications

• Experience with ISO 27001 and audits.
• Knowledge of regulatory frameworks (SOC, SOX, GDPR, CRA).
• Ability to translate requirements into practical security processes.

Responsibilities

• Maintain Brooks' ISO 27001 ISMS and support audits.
• Coordinate audits, certifications, and surveillance activities.
• Develop and review security policies, standards, and governance docs.
• Manage risk registers, remediation tracking, and action plans.
• Support security metrics, reporting, and dashboards.
• Guide responses to customer security questionnaires and third-party due diligence.

Skills

ISO 27001 knowledge

Audit support

Regulatory compliance

Risk assessment

Education

Security+

ISO 27001 Internal Auditor

ISO 27001 Lead Auditor

CRISC

CISA

CISSP (Associate or Full)

Job description

Brooks Automation is seeking a Governance, Risk & Compliance (GRC) Analyst to advance our ISMS, regulatory readiness, and customer security posture. You will work with the CISO and stakeholders across IT, Legal, HR, and Quality to translate frameworks into operational controls and measurable improvements.

The role requires hands-on experience with ISO 27001, audits, and various regulatory requirements, including NIST CSF, GDPR, and CRA.