InfoSec & Continuity Lead

TMF Group; Kuala Lumpur; On-site; MYR 70,000 - 110,000; Full time

Job summary

TMF Group in Malaysia seeks a local information security and security continuity specialist to service ISMS, BCP, ERP, and physical security. You will act as the main contact for security matters, ensuring compliance with ISO 27001 and related standards while coordinating initiatives across the organisation.

You will support audits, manage incident reporting, and collaborate with asset owners on risk assessments, training staff, and aligning local plans with global standards.

Qualifications

• Bachelor's degree in Information Security, Risk Management, or related field.
• Minimum 2 years of experience in a security, compliance, or risk management role.
• Familiarity with ISO 27001, BCP/ERP frameworks, and emergency response protocols.
• Strong communication and coordination skills.
• Ability to work independently and manage multiple priorities.
• Bachelor’s degree in a relevant field is an advantage.

Responsibilities

• Act as the local point of contact for Information Security (ISMS) matters.
• Maintain and update the local Business Continuity Plan (BCP) and coordinate ISO22301 execution.
• Develop and maintain Emergency Response Procedures for the local office; coordinate with authorities.
• Oversee access control, visitor management, and office security measures; conduct risk assessments.
• Ensure compliance with local laws and report security incidents and audit findings; participate in regional/global security initiatives.

Skills

Information security

ISO 27001

BCP/ERP

Emergency response

Compliance

Risk management

Communication

Coordination

Independent work

Education

Bachelor's degree in Information Security, Risk Management, or related field

Bachelor’s degree in a relevant field is an advantage

Job description

TMF Group in Malaysia seeks a local information security and security continuity specialist to service ISMS, BCP, ERP, and physical security. You will act as the main contact for security matters, ensuring compliance with ISO 27001 and related standards while coordinating initiatives across the organisation.

You will support audits, manage incident reporting, and collaborate with asset owners on risk assessments, training staff, and aligning local plans with global standards.