[Hybrid] Information Security

TMF Group; Kuala Lumpur; On-site; MYR 60,000 - 80,000; Full time

Job summary

A leading global compliance firm based in Kuala Lumpur is seeking an experienced professional to manage ISAE 3402 program deliverables and ISO certification audits. The role involves coordinating with stakeholders to ensure compliance with standards, managing annual planning, and conducting risk analysis. Ideal candidates will have expertise in program management, audit coordination, and strong analytical skills. This position offers the opportunity to work in a collaborative environment focused on continuous improvement.

Qualifications

• Experience in program management and audit coordination.
• Knowledge of ISAE 3402 and ISO certification processes.
• Strong analytical skills for data-driven decision making.

Responsibilities

• Manage program deliverables for ISAE 3402 and ISO audits.
• Coordinate with stakeholders to ensure compliance.
• Provide risk analysis and suggest improvements.

Job description

ISAE 3402 program management and audit coordination

Manage the program deliverables end-to-end including the annual planning, internal assessments, external audits, reporting and program reviews.

Serve as point of contact, coordinating and collaborating with stakeholders to ensure compliance with the ISAE 3402 requirements.

Work with the team on ISAE 3402 projects and tasks, as assigned.

ISO certification audits

Manage the program deliverables including the annual planning, internal audit and reporting.

Collaborate with Governance, Risk and Compliance/Business Continuity Team to ensure compliance with the ISO standard and policies requirements at both local and global level.

Work with the team on ISMS/BCMS related projects and tasks, as assigned.

Others

Provide data-driven analysis to aid management in decision making to address risk and issues, as required.

Escalate risks and coordinate actions needed to mitigate risks.

Collaborate with team members by identifying opportunities for improvement within the assurance and accreditations related activities.