GRC Analyst: ISO 27001 & Security Compliance

Brooks Automation; Johor Bahru; On-site; MYR 120,000 - 180,000; Full time

Job summary

Brooks Automation is seeking a Governance, Risk & Compliance (GRC) Analyst to strengthen our ISMS, regulatory readiness, and customer security posture. You will collaborate with the CISO and stakeholders across IT, Engineering, Legal, HR, Operations, and Quality to translate frameworks into actionable security improvements.

This onsite role in Johor Bahru (or Penang) focuses on governance, risk management, security awareness, and incident governance.

Qualifications

• 5-7 years of experience in Governance, Risk & Compliance, Information Security, Internal Audit, IT Audit or related discipline.
• Strong knowledge of information security principles and controls.
• Experience supporting compliance initiatives or audits.
• Excellent written communication and documentation skills.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Strong organizational skills and attention to detail.

Responsibilities

• Support and maintain Brooks' ISO 27001 ISMS.
• Coordinate internal and external audits, surveillance audits and certification activities.
• Assist with policy development, reviews, standards, procedures and governance documentation.
• Maintain control ownership, evidence repositories and audit readiness documentation.
• Coordinate remediation tracking and corrective action plans.
• Facilitate cybersecurity risk assessments and business impact discussions.
• Maintain risk registers and assist control owners with mitigation planning.
• Track risk treatment plans and exceptions.
• Support management reporting, metrics and risk dashboards.
• Respond to customer security questionnaires and due diligence requests.
• Support supplier and third-party security reviews.
• Assist with regulatory and customer requirements including ISO 27001, NIST CSF and GDPR.
• Partner with Legal on security-related contractual requirements.
• Coordinate annual security awareness training campaigns.
• Manage phishing simulation programs and track compliance metrics.
• Develop security awareness communications.

Skills

Governance & Compliance

Information Security

Risk Management

Audits

Stakeholder Communication

Policy & Procedures

Job description

Brooks Automation is seeking a Governance, Risk & Compliance (GRC) Analyst to strengthen our ISMS, regulatory readiness, and customer security posture. You will collaborate with the CISO and stakeholders across IT, Engineering, Legal, HR, Operations, and Quality to translate frameworks into actionable security improvements.

This onsite role in Johor Bahru (or Penang) focuses on governance, risk management, security awareness, and incident governance.