INFORMATION SECURITY ANALYST (GOVERNANCE, RISK & COMPLIANCE)

Bateriku; Shah Alam; On-site; MYR 90,000 - 130,000; Full time

Benefits offered by this job

Outpatient Medical Coverage

Inpatient Medical Insurance

Staff Discount

Staff Credit Facilities

Special Leave

Job summary

Bateriku is seeking an INFORMATION SECURITY ANALYST (GOVERNANCE, RISK & COMPLIANCE) to support ISMS implementation aligned with ISO/IEC 27001:2022 and ITGC. The role focuses on governance, risk assessment, control monitoring and audit readiness, coordinating with departments to ensure security requirements are met.

You will help develop ISMS documentation, risk registers and control evidence, assist internal audits, and contribute to awareness activities and process improvements across the

Qualifications

• Bachelor's degree in Information Technology.
• 3–5 years in IT/security, governance, risk or compliance.
• Understanding of IT infrastructure and cybersecurity principles.
• Working knowledge of ISO/IEC 27001:2022 (ISMS) and ITGC requirements.
• Familiarity with risk assessment, internal audits and compliance monitoring.

Responsibilities

• Support Lead Implementer in executing approved initiatives and roadmaps.
• Assist in conducting information security risk assessments and identify mitigation gaps.
• Monitor compliance with security policies, SOPs and ISMS controls.
• Support internal audits, compliance reviews and audit evidence.
• Develop and maintain ISMS documentation, risk registers and control records.
• Coordinate with departments to close audit findings and deficiencies.
• Assist in developing security awareness materials and learning content.

Skills

IT governance

Risk assessment

Cybersecurity principles

Audit readiness

Documentation

Education

Bachelor's degree in Information Technology

Tools

ITGC

ISMS (ISO/IEC 27001:2022)

Job description

INFORMATION SECURITY ANALYST (GOVERNANCE, RISK & COMPLIANCE)

Job Description

What you will do as an INFORMATION SECURITY ANALYST (GOVERNANCE, RISK & COMPLIANCE)?

About the Job

To support the implementation and continual improvement of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022 and IT General Controls (ITGC). The role focuses on information security governance, risk assessment, awareness activity, control monitoring, audit readiness, documentation and coordination with relevant departments to ensure compliance with established security requirements and procedures.

Qualifications

• Bachelor's degree in Information Technology.
• 3–5 years of relevant working experience in IT, cybersecurity, information security, IT governance, risk and compliance, or related fields.
• Good understanding of IT infrastructure, technology environments and cybersecurity principles.
• Working knowledge of ISO/IEC 27001:2022 (ISMS) and ITGC requirements.
• Familiarity with risk assessment, internal audit, security controls and compliance monitoring.

Responsibilities

• Support the Lead Implementer in executing approved initiatives, implementation plans and roadmaps.
• Assist in conducting information security risk assessments, identifying control gaps and recommending risk mitigation measures.
• Monitor compliance with established security policies, SOPs and ISMS control requirements.
• Support internal audits, compliance reviews and the preparation and verification of audit evidence.
• Assist in developing and maintaining ISMS documentation, risk registers, control records and implementation trackers.
• Coordinate with relevant departments to follow up on outstanding actions, audit findings and control deficiencies.
• Apply knowledge of IT infrastructure, technology and cybersecurity to support security control assessments and identify potential risks.
• Assist in developing information security awareness materials and interactive learning content through the organisation's L&D platform.
• Prepare progress updates and reports on ISMS implementation, risk status and compliance activities.
• Perform other related duties assigned by the HOU – Process, Control & Governance.

What we Offer

Outpatient Medical CoverageInpatient Medical InsuranceStaff DiscountStaff Credit FacilitiesSpecial Leave