ISMS Governance & Risk Analyst – ISO 27001 Specialist

Bateriku; Shah Alam; On-site; MYR 90,000 - 130,000; Full time

Benefits offered by this job

Outpatient Medical Coverage

Inpatient Medical Insurance

Staff Discount

Staff Credit Facilities

Special Leave

Job summary

Bateriku is seeking an INFORMATION SECURITY ANALYST (GOVERNANCE, RISK & COMPLIANCE) to support ISMS implementation aligned with ISO/IEC 27001:2022 and ITGC. The role focuses on governance, risk assessment, control monitoring and audit readiness, coordinating with departments to ensure security requirements are met.

You will help develop ISMS documentation, risk registers and control evidence, assist internal audits, and contribute to awareness activities and process improvements across the

Qualifications

• Bachelor's degree in Information Technology.
• 3–5 years in IT/security, governance, risk or compliance.
• Understanding of IT infrastructure and cybersecurity principles.
• Working knowledge of ISO/IEC 27001:2022 (ISMS) and ITGC requirements.
• Familiarity with risk assessment, internal audits and compliance monitoring.

Responsibilities

• Support Lead Implementer in executing approved initiatives and roadmaps.
• Assist in conducting information security risk assessments and identify mitigation gaps.
• Monitor compliance with security policies, SOPs and ISMS controls.
• Support internal audits, compliance reviews and audit evidence.
• Develop and maintain ISMS documentation, risk registers and control records.
• Coordinate with departments to close audit findings and deficiencies.
• Assist in developing security awareness materials and learning content.

Skills

IT governance

Risk assessment

Cybersecurity principles

Audit readiness

Documentation

Education

Bachelor's degree in Information Technology

Tools

ITGC

ISMS (ISO/IEC 27001:2022)

Job description

Bateriku is seeking an INFORMATION SECURITY ANALYST (GOVERNANCE, RISK & COMPLIANCE) to support ISMS implementation aligned with ISO/IEC 27001:2022 and ITGC. The role focuses on governance, risk assessment, control monitoring and audit readiness, coordinating with departments to ensure security requirements are met.

You will help develop ISMS documentation, risk registers and control evidence, assist internal audits, and contribute to awareness activities and process improvements across the