[Hybrid] Cybersecurity - Local Security Officer

TMF Group; Kuala Lumpur; On-site; MYR 60,000 - 80,000; Full time

Job summary

A global business services provider is seeking a Local Security Officer to implement and maintain security policies at the local level in Kuala Lumpur. The role involves managing information security, business continuity, and emergency response planning to ensure compliance with international standards. Ideal candidates will have a degree in Information Security and at least 2 years of relevant experience.

Benefits

Career development opportunities

Global learning opportunities

Flexible work environment

Qualifications

• Minimum 2 years of experience in a security, compliance, or risk management role.
• Familiarity with ISO 27001 and BCP/ERP frameworks.
• Ability to work independently and manage multiple priorities.

Responsibilities

• Act as the local point of contact for all information security matters.
• Maintain and update the local Business Continuity Plan.
• Develop and maintain emergency response procedures for the local office.
• Oversee access control systems and office security measures.
• Prepare and submit regular reports on security incidents.

Skills

Information Security Knowledge

Risk Management

Strong Communication

Education

Bachelor’s degree in Information Security or related field

Job description

Overview

TMF Group is a leading global provider of high-value business services to clients operating and investing globally. We focus on providing specialized and business-critical financial and administrative services that enable our clients to operate their corporate structures, finance vehicles and investment funds in different geographical locations.

The Local Security Officer (LSO) is responsible for implementing and maintaining TMF Group’s security policies and procedures at the local level. This includes ensuring compliance with the Information Security Management System (ISMS), maintaining Business Continuity Plans (BCP), and coordinating Emergency Response Planning (ERP) to safeguard people, assets, and operations.

Responsibilities

1. 1. Information Security (ISMS)

   Act as the local point of contact for all information security matters.

   Ensure compliance with TMF’s global Information Security Management Framework and underlying policies, procedures, and standards.

   Ensure compliance with ISO 27001 and ISAE 3402 standards.

   Support internal and external audits related to information security.

   Follow up on the closure of the corrective and preventive action plan for the reported non-conformities and observations.

   Report and escalate security incidents to the Global Information Security Officer (GISO).

   Coordinate with asset and process owners for periodic review of asset list and risk assessment.

   Conduct periodic security awareness training for staff.

2. 2. Business Continuity Planning (BCP)

   Maintain and update the local Business Continuity Plan.

   Coordinate regular BCP testing and simulations.

   Ensure critical business functions are identified and recovery strategies are in place.

   Support the implementation of the Business Continuity Management System (BCMS) ISO22301.

   Liaise with global and regional BCP teams to align local plans with corporate standards.

3. 3. Emergency Response Planning (ERP)

   Develop and maintain emergency response procedures for the local office.

   Coordinate with building management and local authorities during emergencies.

   Ensure emergency contact lists and communication protocols are up to date.

4. 4. Physical Security

   Oversee access control systems, visitor management, and office security measures.

   Conduct regular security risk assessments and recommend improvements.

   Manage relationships with security vendors and service providers.

5. 5. Compliance & Reporting

   Ensure compliance with local laws and regulations related to security and safety.

   Prepare and submit regular reports on security incidents, audit findings, and risk assessments.

   Participate in regional and global security meetings and initiatives.

Qualifications & Experience

• Bachelor’s degree in Information Security, Risk Management, or related field.
• Minimum 2 years of experience in a security, compliance, or risk management role.
• Familiarity with ISO 27001, BCP/ERP frameworks, and emergency response protocols.
• Strong communication and coordination skills.
• Ability to work independently and manage multiple priorities.
• Bachelor’s degree in a relevant field is an advantage.

What’s in it for you?

• Work with colleagues and clients around the world on interesting and challenging work.
• We provide internal career opportunities, so you can take your career further within TMF.
• Continuous development is supported through global learning opportunities from the TMF Business Academy.

Making an impact

You’ll be helping us to make the world a simpler place to do business for our clients. Through our corporate social responsibility program, you’ll also be making a difference in the communities where we work. Strong feedback culture to help build an engaging workplace. Our inclusive work environment allows you to work from our offices around the world, as well as from home, helping you find the right work-life balance to perform at your best.