GRC Senior Consultant: Security & Risk Governance

EC-Council Global Services; Kuala Lumpur; Vor Ort; MYR 90.000 - 130.000; Vollzeit

Zusammenfassung

EC-Council is seeking a Senior Consultant to support security governance and risk management activities in a fast-paced, ticket-driven environment. The role involves reviewing and approving cybersecurity and technology-related requests, assessing risk, and ensuring compliance with policies and SLAs.

The candidate will collaborate with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams, managing requests via ServiceNow, Archer or similar platforms, and contributing to

Qualifikationen

• Basic to intermediate understanding of cybersecurity and networking concepts.
• Understanding of IP addresses, subnets, ports, protocols, network connectivity and security controls.
• Good understanding of cybersecurity risk concepts, including risk identification, assessment, impact and likelihood.
• Understanding of Confidentiality, Integrity and Availability (CIA) and how security risks can impact them.
• Understanding of risk treatment plans, risk mitigation and risk acceptance.
• Ability to assess the business impact and security implications of technology and security requests.
• Familiarity with ticketing/GRC platforms such as ServiceNow, Archer or similar tools.
• Strong analytical and decision-making skills.
• Strong ownership, responsiveness and accountability.
• Ability to understand urgency and prioritize requests based on risk and business requirements.

Aufgaben

• Review and approve cybersecurity and technology-related requests based on business requirements, security policies and risk considerations.
• Assess the business justification, security implications, business impact, risk and required controls associated with requests.
• Support risk acceptance, security exception and risk register activities.
• Review requests related to network, access, endpoint, cloud and other security controls.
• Work closely with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams to clarify requirements and resolve queries.
• Manage requests through ServiceNow, Archer or similar ticketing/GRC platforms.
• Understand the urgency and business impact of requests and prioritize work appropriately.
• Ensure requests are reviewed and actioned within agreed SLA/TAT requirements.
• Maintain appropriate documentation and audit trails for reviews and approvals.
• Support the wider GRC team with other governance and risk activities as required.

Kenntnisse

Cybersecurity basics

Networking concepts

CIA triad

Risk concepts

Risk assessment

GRC platforms

ServiceNow

Archer

Stakeholder management

Communication

Team collaboration

Ticket-driven processes

Tools

ServiceNow

Archer

Jobbeschreibung

EC-Council is seeking a Senior Consultant to support security governance and risk management activities in a fast-paced, ticket-driven environment. The role involves reviewing and approving cybersecurity and technology-related requests, assessing risk, and ensuring compliance with policies and SLAs.

The candidate will collaborate with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams, managing requests via ServiceNow, Archer or similar platforms, and contributing to