Hybrid IT Compliance & Security Controls Specialist

Marsh McLennan; Kuala Lumpur; Hybrid; MYR 90,000 - 130,000; Full time

Job summary

Marsh Risk in Kuala Lumpur is seeking a seasoned IT compliance and cybersecurity professional to join our regional IT Operations team. This hybrid role requires three days in the office and focuses on strengthening our security posture across Asia-Pacific.

You will own vulnerability management, IT controls compliance, risk assessments, and security metrics reporting to the CISO team, collaborating with business units, IT compliance colleagues, and external vendors.

Qualifications

• Approximately 6+ years of experience in IT compliance, controls, cybersecurity, or a related field.
• Strong project management and administrative skills with the ability to prioritise workload and manage multiple stakeholders independently.
• Demonstrated attention to detail and commitment to meeting SLAs and compliance requirements; ability to learn and grow in cyber security domain.

Responsibilities

• Monitor vulnerability management activities (DAST, SAST, Pen testing, infrastructure scans, SSL certificates) and support remediation tracking to meet SLAs.
• Monitor and manage IT operational controls compliance including user access reviews, service account management, MFA rollout, password policy compliance, and risk management.
• Support disaster recovery planning and execution, including annual DR plan reviews and database restore testing.
• Coordinate with vendors and business stakeholders on security requirements, third-party risk assessments, and incident response audit findings.
• Prepare weekly security metrics reporting and monthly operating reports for regional leadership and the CISO team.

Skills

IT compliance

Cybersecurity

Project management

Stakeholder management

Tools

SNYK

GitGuardian

Edgescan

Bitsight

SIEM

IAM

MFA

DARE

Job description

Marsh Risk in Kuala Lumpur is seeking a seasoned IT compliance and cybersecurity professional to join our regional IT Operations team. This hybrid role requires three days in the office and focuses on strengthening our security posture across Asia-Pacific.

You will own vulnerability management, IT controls compliance, risk assessments, and security metrics reporting to the CISO team, collaborating with business units, IT compliance colleagues, and external vendors.