ISMS Lead: Security Governance & Risk

PSI INCONTROL SDN BHD; Sungai Buloh; On-site; MYR 90,000 - 130,000; Part time

Benefits offered by this job

Medical

Education support

Loans

Dental

Annual Company Overseas Trip

Company Outing

Job summary

PSI Incontrol in Malaysia seeks an Information Security Officer on a contractual basis to manage the ISMS and ensure ongoing ISO/IEC 27001 compliance. The role focuses on governance, risk, compliance, and audit readiness, coordinating policies, risk assessments, and audit activities across the organization.

The ISO will promote security awareness, work with ICT teams to implement controls, and ensure alignment with CF Security & Resilience, PSI Software SE.

Qualifications

• Experience implementing, maintaining, and auditing ISMS
• Knowledge of ISO/IEC 27001 and related standards
• Familiarity with IEC 62443 is a plus

Responsibilities

• Implement, maintain, and improve the ISMS per ISO/IEC 27001
• Ensure compliance with PSI Information Security Policies and regulatory requirements
• Conduct information security risk assessments and track mitigation actions
• Coordinate internal and external audits and remediation activities
• Develop and maintain security policies, procedures, and documentation
• Monitor and report information security risks and control effectiveness
• Work with ICT teams to ensure technical and administrative controls
• Drive security awareness programs across the organization
• Act as primary contact for information security matters

Skills

ISMS implementation

Policy & documentation

IT security infrastructure

Security controls

ISO 27001 certifications

Education

Diploma or Degree in CS/IT/Cybersecurity/Engineering

Tools

ISO 27001 Lead Implementer/Auditor

CISSP/CISM/CISA (certifications)

Job description

PSI Incontrol in Malaysia seeks an Information Security Officer on a contractual basis to manage the ISMS and ensure ongoing ISO/IEC 27001 compliance. The role focuses on governance, risk, compliance, and audit readiness, coordinating policies, risk assessments, and audit activities across the organization.

The ISO will promote security awareness, work with ICT teams to implement controls, and ensure alignment with CF Security & Resilience, PSI Software SE.