GRC & InfoSec Analyst — Governance, Risk & Compliance

Petron Malaysia; Kuala Lumpur; On-site; MYR 60,000 - 80,000; Full time

Job summary

A leading oil company in Asia seeks a skilled professional for an Information Security Governance role. The successful candidate will implement and manage GRC programs, ensuring compliance with regulatory standards like NIST and ISO 27001. The role requires a Bachelor's degree in IT or related fields, 3-5 years of relevant experience, and certification in ISO27001. Join us in making a difference in the oil sector and contributing to our vision for total customer solutions.

Qualifications

• Minimum 3-5 years’ experience in a similar role.
• Certified ISO27001:2013/2022.
• Experience in project coordination for IT projects.

Responsibilities

• Develop and implement GRC programs.
• Lead internal and external compliance audits.
• Maintain the risk register.

Skills

Information Security Management System (ISMS) framework

Compliance and Risk Assessment

IT security technologies and controls

Strong written and verbal communication skills

Time management

Education

Bachelor’s Degree or Diploma in Computing/Information Technology/Computer Security

Tools

NIST standards

ISO 27001

PCI DSS

Job description

A leading oil company in Asia seeks a skilled professional for an Information Security Governance role. The successful candidate will implement and manage GRC programs, ensuring compliance with regulatory standards like NIST and ISO 27001. The role requires a Bachelor's degree in IT or related fields, 3-5 years of relevant experience, and certification in ISO27001. Join us in making a difference in the oil sector and contributing to our vision for total customer solutions.