GRC Analyst: ISO 27001 & Security Programs Lead

Brooks Automation US; Malaysia; On-site; MYR 60,000 - 100,000; Full time

Job summary

Brooks Automation US is seeking a Governance, Risk & Compliance (GRC) Analyst to drive the ISMS, regulatory readiness, and customer security requirements. You will collaborate with the CISO and stakeholders across IT, Legal, HR, and Operations to strengthen Brooks' security posture.

This onsite role in Malaysia involves translating frameworks into actionable processes, coordinating audits, and supporting governance initiatives to enable business growth.

Qualifications

• 5-7 years of experience in Governance, Risk & Compliance, Information Security, Internal Audit, IT Audit, Risk Management, or related discipline.
• Working knowledge of information security principles and controls.
• Experience supporting compliance initiatives or audits.
• Strong written communication and documentation skills.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Strong organizational skills and attention to detail.
• Ability to manage multiple projects and deadlines simultaneously.

Responsibilities

• Support and maintain ISO 27001 ISMS.
• Coordinate internal and external audits and surveillance activities.
• Assist with policy development, reviews, standards, procedures, and governance documentation.
• Maintain evidence repositories and audit readiness documentation.
• Coordinate remediation tracking and corrective action plans.
• Facilitate cybersecurity risk assessments and maintain risk registers.
• Support management reporting, metrics, and risk dashboards.
• Respond to customer security questionnaires and due diligence requests.
• Assist with regulatory and customer requirements including ISO 27001, NIST CSF, GDPR, and CRA.
• Collaborate with Legal and business stakeholders on security-related contractual requirements.
• Coordinate annual security awareness training campaigns and phishing simulations.
• Assist with incident governance and lessons learned.

Skills

Governance & Compliance

Information Security

Audits & Compliance

Stakeholder communication

Documentation

Project management

Job description

Brooks Automation US is seeking a Governance, Risk & Compliance (GRC) Analyst to drive the ISMS, regulatory readiness, and customer security requirements. You will collaborate with the CISO and stakeholders across IT, Legal, HR, and Operations to strengthen Brooks' security posture.

This onsite role in Malaysia involves translating frameworks into actionable processes, coordinating audits, and supporting governance initiatives to enable business growth.