Information Security Analyst

BATERIKU (M) SDN. BHD.; Shah Alam; On-site; MYR 70,000 - 120,000; Full time

Job summary

Bateriku.com in Malaysia seeks an ISMS-focused professional to support the implementation and continual improvement of ISO/IEC 27001:2022 and ITGC controls. You will handle information security governance, risk assessment, awareness activities, control monitoring, and audit readiness, coordinating with multiple departments to ensure compliance with security requirements and procedures.

The role involves assisting the Lead Implementer, maintaining ISMS documentation, risk registers, and evidence

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity, or related field.
• 3–5 years of experience in IT, cybersecurity, information security, IT governance, risk and compliance.
• Good understanding of IT infrastructure and cybersecurity principles.
• Working knowledge of ISO/IEC 27001:2022 (ISMS) and ITGC requirements.
• ISO/IEC 27001 Internal Auditor or Lead Implementer certifications are a plus.

Responsibilities

• Support ISMS implementation and continual improvement to meet ISO/IEC 27001:2022 and ITGC.
• Assist with information security governance, risk assessments, awareness activities, control monitoring, and audit readiness.
• Maintain ISMS documentation, risk registers, control records and implementation trackers.
• Coordinate with departments to follow up on audit findings and deficiencies.
• Develop information security awareness materials using the organisation's L&D platform.

Skills

Information security governance

Risk assessment

Audit readiness

Control monitoring

Documentation

Education

Bachelor's degree in IT / CS / Cybersecurity

Tools

ISO/IEC 27001

ITGC

Job description

To support the implementation and continual improvement of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022 and IT General Controls (ITGC). The role focuses on information security governance, risk assessment, awareness activity, control monitoring, audit readiness, documentation and coordination with relevant departments to ensure compliance with established security requirements and procedures.

Support the Lead Implementer in executing approved initiatives, implementation plans and roadmaps.

Assist in conducting information security risk assessments, identifying control gaps and recommending risk mitigation measures.

Monitor compliance with established security policies, SOPs and ISMS control requirements.

Support internal audits, compliance reviews and the preparation and verification of audit evidence. Assist in developing and maintaining ISMS documentation, risk registers, control records and implementation trackers.

Coordinate with relevant departments to follow up on outstanding actions, audit findings and control deficiencies.

Apply knowledge of IT infrastructure, technology and cybersecurity to support security control assessments and identify potential risks. Assist in developing information security awareness materials and interactive learning content through the organisation's L&D platform.

Prepare progress updates and reports on ISMS implementation, risk status and compliance activities.

Perform other related duties assigned by the HOU – Process, Control & Governance.

Education and experiences:

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems or a related field.

3–5 years of relevant working experience in IT, cybersecurity, information security, IT governance, risk and compliance, or related fields.

Good understanding of IT infrastructure, technology environments and cybersecurity principles.

Working knowledge of ISO/IEC 27001:2022 (ISMS) and ITGC requirements. Familiarity with risk assessment, internal audit, security controls and compliance monitoring.

ISO/IEC 27001 Internal Auditor, Lead Implementer or other relevant certifications will be an added advantage.

Vehicle Services & Repair 101-1,000 employees

Established in March 2014, Bateriku.com started as an on-demand car battery replacement service provider, evolving into an ecosystem that connects car users to roadside assistance, trusted workshops, auto parts marketplace, and ancillary services.

Bateriku.com scaled up by leveraging big data, technology, and sharing economy. To date, Bateriku.com operates close to 200 retail outlets (Pitstop) nationwide and has rendered its services to more than 1.5 million car

Established in March 2014, Bateriku.com started as an on-demand car battery replacement service provider, evolving into an ecosystem that connects car users to roadside assistance, trusted workshops, auto parts marketplace, and ancillary services.

Bateriku.com scaled up by leveraging big data, technology, and sharing economy. To date, Bateriku.com operates close to 200 retail outlets (Pitstop) nationwide and has rendered its services to more than 1.5 million car