IAM Controls & Compliance Specialist

Agensi Pekerjaan Penta Consultancy Sdn. Bhd; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Benefits offered by this job

Restaurant d'entreprise

Job summary

Agensi Pekerjaan Penta Consultancy Sdn. Bhd is seeking an IAM Controls & Compliance Specialist to join our security team in Kuala Lumpur. You will design and maintain IAM control frameworks, ensuring alignment with internal policies, regulatory requirements, and cyber security standards.

The role requires hands-on experience in IAM controls, RBAC, SoD, and JML, with an emphasis on risk-based control testing, audit support, and clear documentation for management review.

Qualifications

• Minimum of 3 years in IAM controls, IT risk, or cybersecurity compliance.
• Solid understanding of IAM control frameworks and access governance.
• Experience with JML, PAM, RBAC, and SoD testing.
• Familiarity with regulatory audits and internal/external audit support.
• Strong analytical, documentation, and cross-functional collaboration skills.

Responsibilities

• Design, implement, and maintain IAM control frameworks aligned to policies, regs, and cybersecurity standards.
• Perform IAM control assessments and validate design and operating effectiveness of access controls.
• Execute monitoring and testing across IAM processes including JML, PAM, and access certification.
• Identify control gaps, track exceptions, and coordinate remediation with stakeholders.
• Assess RBAC, SoD, least privilege, and identity lifecycle management requirements.
• Prepare IAM control metrics, risk indicators, and assurance reports for management.
• Support audits by providing control evidence, responding to audit requests, tracking remediation.
• Maintain control documentation and evidence repositories; ensure corrective actions.

Skills

IAM controls

IT risk

IT audit

Cybersecurity compliance

RBAC & SoD

JML processes

PAM

Access certification

Documentation & reporting

Stakeholder collaboration

Education

CRISC

CISM

ISO 27001 Lead Auditor

CISSP

Job description

About the job IAM Controls & Compliance Specialist

Job Responsibilities:

• Design, implement, and maintain IAM control frameworks to ensure alignment with internal policies, regulatory requirements, and cybersecurity standards.
• Perform IAM control assessments and validate the design and operating effectiveness of access management controls.
• Execute control monitoring and testing activities across IAM processes, including Joiner, Mover, Leaver (JML), Privileged Access Management (PAM), and access certification.
• Identify control gaps, track exceptions, and coordinate remediation activities with relevant stakeholders.
• Assess compliance with Role-Based Access Control (RBAC), Segregation of Duties (SoD), least privilege principles, and identity lifecycle management requirements.
• Prepare IAM control metrics, risk indicators, and assurance reports for management review.
• Support internal and external audits by preparing control evidence, responding to audit requests, and tracking remediation actions.
• Maintain control documentation, evidence repositories, and ensure implementation of corrective actions.

Job Requirements:

• Minimum 3 years of experience in IAM Controls, IT Risk, IT Audit, Cybersecurity Compliance, or Technology Risk.
• Strong understanding of IAM control frameworks, access governance, and security control testing methodologies.
• Experience in assessing IAM controls related to JML processes, PAM, access certification, RBAC, and Segregation of Duties (SoD).
• Familiarity with regulatory requirements, internal audit processes, and external audit support.
• Strong analytical, documentation, and problem-solving skills with attention to detail.
• Ability to work with cross-functional teams including security, risk, compliance, and technology stakeholders.
• Experience in financial services or regulated industries is preferred.
• Relevant certifications such as CRISC, CISM, ISO 27001 Lead Auditor, CISSP, or equivalent are advantageous.