INFORMATION SECURITY OFFICER (CONTRACTUAL)

PSI INCONTROL SDN BHD; Sungai Buloh; On-site; MYR 90,000 - 130,000; Part time

Benefits offered by this job

Medical

Education support

Loans

Dental

Annual Company Overseas Trip

Company Outing

Job summary

PSI Incontrol in Malaysia seeks an Information Security Officer on a contractual basis to manage the ISMS and ensure ongoing ISO/IEC 27001 compliance. The role focuses on governance, risk, compliance, and audit readiness, coordinating policies, risk assessments, and audit activities across the organization.

The ISO will promote security awareness, work with ICT teams to implement controls, and ensure alignment with CF Security & Resilience, PSI Software SE.

Qualifications

• Experience implementing, maintaining, and auditing ISMS
• Knowledge of ISO/IEC 27001 and related standards
• Familiarity with IEC 62443 is a plus

Responsibilities

• Implement, maintain, and improve the ISMS per ISO/IEC 27001
• Ensure compliance with PSI Information Security Policies and regulatory requirements
• Conduct information security risk assessments and track mitigation actions
• Coordinate internal and external audits and remediation activities
• Develop and maintain security policies, procedures, and documentation
• Monitor and report information security risks and control effectiveness
• Work with ICT teams to ensure technical and administrative controls
• Drive security awareness programs across the organization
• Act as primary contact for information security matters

Skills

ISMS implementation

Policy & documentation

IT security infrastructure

Security controls

ISO 27001 certifications

Education

Diploma or Degree in CS/IT/Cybersecurity/Engineering

Tools

ISO 27001 Lead Implementer/Auditor

CISSP/CISM/CISA (certifications)

Job description

INFORMATION SECURITY OFFICER (CONTRACTUAL)

Responsible to: Head of ICT RH SEA and CISO PSI Software SE

Relationship: Works closely with the CISO PSI SE, Head of ICT, ICT Engineers, Total Quality Management Department and the IT users of the Company.

General Description: The Information Security Officer (ISO) is responsible for managing and maintaining the organization’s Information Security Management System (ISMS) and ensuring continuous compliance with ISO/IEC 27001 and related ISO 27000 standards.

The role focuses on information security governance, risk management, compliance, and audit readiness, ensuring that the organization maintains a structured and effective security posture. The ISO acts as the central coordinator for security policies, risk assessments, and audit activities, while promoting security awareness across the organization.

Primary Job Functions:

• Implement, maintain, and continuously improve the ISMS in accordance with ISO/IEC 27001. The person will be the local execution and implementation while prioritization and approach are aligned with CF Security & Resilience, PSI Software SE.
• Ensure compliance with PSI Information Security Policies and applicable regulatory or contractual requirements
• Conduct information security risk assessments, maintain the risk register, and track mitigation actions
• Coordinate and support internal audits, external ISO certification audits, and audit remediation activities
• Develop, review, and maintain information security policies, procedures, standards, and documentation
• Monitor and report on information security risks, incidents, and control effectiveness
• Assess the impact of system changes and new technologies on information security posture
• Identify security weaknesses, recommend improvements, and coordinate implementation of corrective actions
• Work with ICT teams to ensure appropriate technical and administrative security controls are in place
• Drive security awareness and training programs for employees
• Act as the point of contact for all information security-related matters within the organization

Required Attitude:

• Strong analytical and problem‑solving mindset with attention to detail
• High level of integrity and accountability in handling sensitive information
• Good communication and stakeholder engagement skills
• Ability to work independently while coordinating across departments
• Committed to continuous learning in a rapidly evolving cybersecurity landscape

Required Knowledge:

• Strong understanding of Information Security principles and controls
• Working knowledge of ISO/IEC 27001 ISMS framework and compliance requirements
• Familiarity with risk assessment methodologies and audit processes
• Familiarity with industrial cybersecurity standards such as IEC 62443 is an added advantage

Required Skills:

• Experience in ISMS implementation, maintenance, and audit coordination
• Ability to develop and maintain policies, procedures, and security documentation
• Good understanding of IT infrastructure, networks, and security controls
• Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor are an advantage.

Additional Desired Skills:

Education:

• Minimum Diploma or Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent.

Experience:

• 3–5 years in Information Security / IT Governance.

Work Status:

Travel:

• Moderate travel may be required.

Unlock job insights

Hirer responsiveness Salary match Number of applicants

Your application will include the following questions:

• Which of the following statements best describes your right to work in Malaysia?
• Which of the following types of qualifications do you have?
• How many years' experience do you have as an Information Security Officer?
• Have you completed a Certified Information Systems Security Professional (CISSP) certification?
• How many years of auditing experience do you have?

Consumer Electronics Manufacturing 101-1,000 employees

We are a Solution Provider for Automation and Protection Technologies. Established in 1997, PSI Incontrol has achieved tremendous growth and is one of the leading engineering companies in the region providing a wide spectrum of generic as well as niche products. We are a subsidiary of PSI AG who has a strong presence in Germany and most part of Europe.

Today, we are a prominent regional player in Network Control Systems; Power Services Automation; Control, Protection and Digital Infrastructure System technologies with an outstanding track record of having executed more than 140 projects in various countries with offices in Malaysia, Thailand, India, Oman and Bahrain.

We are a Solution Provider for Automation and Protection Technologies. Established in 1997, PSI Incontrol has achieved tremendous growth and is one of the leading engineering companies in the region providing a wide spectrum of generic as well as niche products. We are a subsidiary of PSI AG who has a strong presence in Germany and most part of Europe.

Today, we are a prominent regional player in Network Control Systems; Power Services Automation; Control, Protection and Digital Infrastructure System technologies with an outstanding track record of having executed more than 140 projects in various countries with offices in Malaysia, Thailand, India, Oman and Bahrain.

Show more

Perks and benefits Medical Miscellaneous allowance Education support Loans Dental Annual Company Overseas Trip, Company Outing, Annu

Information Security Auditor - Technical

Wurth IT Malaysia Sdn. Bhd.

1d ago

1d ago

Researching careers? Find all the information and tips you need on career advice.