Information Security Governance & Compliance Lead

Scicom (MSC) Berhad; Kuala Lumpur; On-site; MYR 67,000 - 78,000; Full time

Benefits offered by this job

Salary up to RM7000

Performance related allowance forStaff

Job summary

Jora Malaysia is seeking a senior Information Security Governance and Compliance professional to lead policy design, implementation, and assurance across the organization in line with ISO27001, COBIT, and ITIL standards.

You will drive policy management lifecycle, ensure effective security controls, and coordinate with internal teams and auditors. A minimum of three years on ICT security/compliance and management experience is required.

Qualifications

• Bachelor’s Degree with Business Management/Technology or equivalent.
• Minimum of three (3) years of experience in ICT (Security Compliance, Business IT or Service Desk Operations) methodologies, tools, and enablers.
• Three (3) years management experience.
• In-depth knowledge of IT organization end-to-end areas and functions.

Responsibilities

• Plan, design and develop and improve the information security policies across the organization based on industry best practices. Stay relevant with latest publications of ISO27001 and other related security standards, regulatory requirements, and best practices.
• To integrate new and existing policies into an established framework, through use of ISO27001 mapping and other relevant frameworks.
• Maintain operational baseline frameworks across technology infrastructure built upon ISO/IEC 27001, COBIT, and ITIL standards.
• Provide management and other stakeholders with indicators for validating information security maturity and measures for regulatory compliance.
• Ensure all information security controls are in place and implemented.
• Develop close working and technical relationships with all critical technology system owners to ensure that the policy controls are understood, and implementation plans are in place.
• To manage skills and knowledge transfer concerned with the security policies, procedures, and standards to respective team.
• Plan design and implement information security awareness programs internally and externally to customers to effectively mitigate the risk exposure and protect organization impact brand reputation.
• Drive continuous compliance audits evaluating adherence to Malaysia's PDPA, (BNM) RMIT guidelines (if applicable), and PCI-DSS requirements.

Education

Bachelor’s Degree with Business Management/Technology or equivalent

Job description

Jora Malaysia is seeking a senior Information Security Governance and Compliance professional to lead policy design, implementation, and assurance across the organization in line with ISO27001, COBIT, and ITIL standards.

You will drive policy management lifecycle, ensure effective security controls, and coordinate with internal teams and auditors. A minimum of three years on ICT security/compliance and management experience is required.