[Hybrid] Local Security Officer

TMF Administrative Services Malaysia Sdn. Bhd.; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

TMF Administrative Services Malaysia Sdn. Bhd.

is seeking a local Information Security Specialist to serve as the point of contact for information security, business continuity, emergency response and physical security across the Malaysian office. You will ensure compliance with global frameworks, ISO 27001 and ISAE 3402 where applicable, coordinate security initiatives, and support audits while maintaining effective risk management and incident reporting.

Qualifications

• Bachelor's degree in Information Security, Risk Management, or related field.
• Minimum 2 years of experience in security, compliance, or risk management.
• Familiarity with ISO 27001, BCP/ERP frameworks, and emergency response protocols.

Responsibilities

• Act as the local point of contact for information security matters.
• Ensure compliance with TMF's global Information Security Management Framework and underlying policies, procedures, and standards.
• Support internal and external audits related to information security.
• Maintain and update the local Business Continuity Plan (BCP) and align with ISO22301.
• Develop and maintain emergency response procedures for the local office.
• Oversee physical security, access control, and vendor relationships.
• Report security incidents to the GISO and coordinate risk assessments.

Skills

Information security

ISO 27001

BCP/ERP frameworks

Audits & compliance

Security awareness training

Stakeholder coordination

Education

Bachelor's degree in Information Security, Risk Management, or related field

Job description

This role serves as the local point of contact for all information security, business continuity, emergency response, and physical security matters. The position ensures compliance with global frameworks, ISO standards, and local regulations while coordinating security initiatives across the organisation.

Key responsibilities

1. Information Security (ISMS)

Act as the local point of contact for all information security matters.

Ensure compliance with TMF’ s global Information Security Management Framework and underlying policies, procedures, and standards.

Ensure compliance with ISO 27001 and ISAE 3402 standards.

Support internal and external audits related to information security.

Follow up on the closure of the corrective and preventive action plan for the reported non-conformities and observations.

Report and elevate security incidents to the Global Information Security Officer (GISO).

Co-ordinating with asset and process owners for periodic review of asset list and risk assessment.

Conduct periodic security awareness training for staff.

2. Business Continuity Planning (BCP)

Maintain and update the local Business Continuity Plan.

Coordinate regular BCP testing and simulations.

Ensure critical business functions are identified and recovery strategies are in place.

Support the implementation of the Business Continuity Management System (BCMS) ISO22301

Liaise with global and regional BCP teams to align local plans with corporate standards.

3. Emergency Response Planning (ERP)

Develop and maintain emergency response procedures for the local office.

Coordinate with building management and local authorities during emergencies.

Ensure emergency contact lists and communication protocols are up to date.

4. Physical Security

Oversee access control systems, visitor management, and office security measures.

Conduct regular security risk assessments and recommend improvements.

Manage relationships with security vendors and service providers.

5. Compliance & Reporting

Ensure compliance with local laws and regulations related to security and safety.

Prepare and submit regular reports on security incidents, audit findings, and risk assessments

Participate in regional and global security meetings and initiatives.

About you

Bachelor's degree in Information Security, Risk Management, or related field

Minimum 2 years of experience in a security, compliance, or risk management role

Familiarity with ISO 27001, BCP/ERP frameworks, and emergency response protocols

Strong communication and coordination skills

Ability to work independently and manage multiple priorities

Bachelor’s degree in a relevant field is an advantage

Professional Services More than 10,000 employees

With over 13,000 colleagues in more than 125 offices across 87 jurisdictions, all working to the same high standards of service and security, we provide our clients with local expertise where it is needed most. Our locations cover 92% of world GDP and 95% of FDI inflow.

We are a key part of our clients’ governance, providing the accounting, tax, payroll, fund administration and legal entity management services essential to their success. We make sure rules are followed, reputations protected and operational compliance maintained.

With over 13,000 colleagues in more than 125 offices across 87 jurisdictions, all working to the same high standards of service and security, we provide our clients with local expertise where it is needed most. Our locations cover 92% of world GDP and 95% of FDI inflow.

We are a key part of our clients’ governance, providing the accounting, tax, payroll, fund administration and legal entity management services essential to their success. We make sure rules are followed, reputations protected and operational compliance maintained.