Information Security Analyst

Ricoh; Shah Alam; Hybrid; MYR 60,000 - 120,000; Full time

Benefits offered by this job

Work from home

Vision insurance

Job summary

Ricoh Malaysia seeks an Information Security Analyst to design, implement, and maintain governance frameworks aligned with ISO 27001, NIST, ITIL, and internal policies across APAC. You will monitor threats, support risk assessments, and drive audit readiness in a hybrid work setup located in Shah Alam.

The role emphasizes policy governance, regulatory compliance, and measurable GRC metrics, with opportunities for promotion and a focus on AI governance, bias monitoring, and documentation.

Qualifications

• Bachelor’s degree in computer science, IT or related field.
• Minimum 2–3 years of information security experience.
• Strong understanding of ISO 27001, NIST, COBIT.
• Proficiency with vulnerability scanners and incident response tools.
• Excellent analytical and problem-solving skills.
• Clear communication and collaboration across departments; APAC support.
• English, Cantonese or Mandarin preferred.

Responsibilities

• Governance & Policy Management: align with global/local requirements and review policies.
• Compliance & Audit: support audits and ensure framework compliance (ISO 27001, NIST, GDPR).
• Metrics & Reporting: maintain GRC dashboards and reports.
• AI Governance: assess AI use cases for fairness, transparency, and risk.
• Note: scope may change; perform related duties as assigned.

Skills

Information security

Risk assessment

Regulatory awareness

Analytical thinking

Cross-functional collaboration

Education

Bachelor’s degree in computer science or IT

Tools

Vulnerability scanners

Incident response management

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

The Information Security Analyst is responsible for ensuring the effective design, implementation, and maintenance of the organization’s information security governance framework. This role supports the enhancement of the company’s security posture by aligning practices with ISO 27001, NIST, ITIL, and internal policies across the Asia Pacific region.

Governance & Policy Management

• Ensure alignment with global governance frameworks and local regulatory requirements.
• Facilitate policy reviews and updates in collaboration with stakeholders.
• Conduct regional information security risk assessments and support mitigation planning.
• Monitor emerging threats and regulatory changes impacting the region.
• Collaborate with business units to ensure risk awareness and ownership

Compliance & Audit

• Support internal and external audits related to information security.
• Ensure compliance with frameworks such as ISO 27001, NIST, GDPR, and local data protection laws.
• Track and report on compliance with applicable laws, regulations, and frameworks (e.g., ISO 27001, NIST, Local Privacy Laws).

Metrics & Reporting

• Maintain dashboards and reports on governance, risk, and compliance (GRC) metrics.

AI Governance

• Evaluate AI use cases for compliance, fairness, transparency, and risk.
• Monitor AI systems for bias, accountability, and explainability.
• Facilitate AI risk assessments and maintain documentation for internal reviews.

Note

• Scope of work will be revised depending on the management needs or request. Others related duties as and when assigned by the superior from time to time

Education

• Bachelor’s degree in computer science, Information Technology, or a related field.
• Minimum 2-3 years of experience in information security.
• Strong understanding of information security frameworks, such as ISO 27001, NIST, and COBIT.
• Proficiency in using security tools and technologies, such as vulnerability scanners, and incident response management.
• Excellent analytical and problem-solving skills, with the ability to identify and mitigate security risks.
• Effective communication and collaboration skills to work across different departments and stakeholders.
• Proven track record of successfully managing security-related projects, including the implementation of new security technologies, policies, and procedures.
• Proficient in English, Cantonese or Mandarin preferred due to support APAC operation.
• Opportunities for promotion
• Vision insurance
• Work from home

Experience

• Information Security : 2 years (Preferred)

Language

Work Location: Hybrid remote in Shah Alam (Petaling)