IAM Controls & Compliance Specialist

Encora Inc.; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

Encora Inc. is seeking an IAM Controls & Compliance Specialist responsible for designing, implementing, monitoring, and validating IAM controls to ensure compliance with internal policies, regulatory requirements, and audit expectations.

The role serves as the primary control assurance function within the IAM operating model. You will support audits, drive control testing, evidence collection, and remediation efforts, while ensuring ongoing alignment with regulatory and cybersecurity

Qualifications

• 3+ years of experience in IAM Controls, IT Risk, IT Audit, Cybersecurity Compliance, or Technology Risk.
• Strong understanding of IAM controls testing, and audit requirements.
• Familiar with regulatory, internal audit, or external audit programs.
• Strong analytical and documentation skills.

Responsibilities

• Validate the Design and Operating effectiveness of IAM control standards and control libraries.
• Ensure alignment with regulatory, risk, and cybersecurity requirements.
• Drive IAM control monitoring programs.
• Establish control effectiveness testing methodologies.
• Track and manage control exceptions and remediation activities.
• Assess effectiveness of JML, PAM, and access certification controls.
• Validate segregation of duties (SoD) and least privilege requirements against the compliance with identity lifecycle and privileged access policies.
• Monitor and report on control deficiencies and risk indicators.
• Support audit reviews and regulatory examinations.
• Maintain control evidence repositories.
• Ensure management actions are effectively implemented and validated.

Skills

IAM Controls

IT Risk

IT Audit

Cybersecurity Compliance

Technology Risk

Job description

The IAM Controls & Compliance Specialist is responsible for designing, implementing, monitoring, and validating IAM controls to ensure compliance with internal policies, regulatory requirements, and audit expectations. The role serves as the primary control assurance function within the IAM operating model.

Key Responsibilities

• Validate the Design and Operating effectiveness of IAM control standards and control libraries.


• Ensure alignment with regulatory, risk, and cybersecurity requirements.


• Drive IAM control monitoring programs.


• Establish control effectiveness testing methodologies.


• Track and manage control exceptions and remediation activities.


• Assess effectiveness of JML, PAM, and access certification controls.


• Validate segregation of duties (SoD) and least privilege requirements against the compliance with identity lifecycle and privileged access policies.


• Monitor and report on control deficiencies and risk indicators.


• Support audit reviews and regulatory examinations.


• Maintain control evidence repositories.


• Ensure management actions are effectively implemented and validated.

Required Skills & Experience

• 3+ years of experience in IAM Controls, IT Risk, IT Audit, Cybersecurity Compliance, or Technology Risk.


• Strong understanding of IAM controls testing, and audit requirements.


• Familiar supporting regulatory, internal audit, or external audit programs.


• Strong analytical and documentation skills.

Preferred Qualifications

• CRISC, CISM, ISO 27001 Lead Auditor, or equivalent.


• Financial services industry experience.