ISMS & MIS Lead: Cloud Security & Compliance

CloudMile; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

CloudMile in Kuala Lumpur seeks a Compliance and MIS professional to help drive ISMS governance, coordinate audits, and ensure staff adherence to information security policies. You will safeguard customer data and assist in risk and control assessments across applications and infrastructure.

The role requires a degree in IT or related field, 1–3 years of security experience, and certifications in ISO/IEC 27001.

Qualifications

• Bachelor's degree in computer technology, information systems, or a related field.
• Possess at least 1-3 years of working experience related to information security practices
• MUST possess good understanding on ISO/IEC 27001:2013 minimum
• MUST be certified with ISO/IEC 27001 Foundation, IA or LA
• Good knowledge of IT and network architecture
• Access control management skills
• Strong communication and interpersonal skills
• Ability to educate technical and non-technical staff on computer security
• Knowledge on cybersecurity standards/frameworks
• Strong analytical and problem-solving skills
• Familiarity with network L1 to L3 concepts and equipment operations (including Palo Alto, Cisco Meraki), as well as managing access control systems (including AD, RADIUS, and VPN)
• Certified in ISO/IEC 27001 Foundation or IE or LA.
• Experience with public cloud services usage or architecture planning.
• Experience in automation scripting or software development.

Responsibilities

• Responsible in conducting the ISMS Committee meeting on ISMS related activities and acceptance of ISMS changes
• Coordinate with ISMS auditors on ISMS compliance audit exercise in ensuring company compliance to the ISMS standards
• Ensure company sections and staffs are comply with ISMS policies, procedures and standards
• Coordinate ISMS yearly policy and management review
• Responsible in providing regular ISMS awareness training to company employees
• The job encompasses leading and participating in the assessment of security, risks, and control effectiveness for applications, infrastructure, and technology projects.
• The Specialist will identify, classify, and document control issues in a company's computing environment by documenting assessment results, recommending corrective action, tracking remediation, evaluating policy and control standard exceptions, and regularly reporting to top management.
• To treat customers’ information and material as private & confidential and shall not at any time during or after the services, for any reason whatsoever disclose or permit to disclose to any person, or otherwise make use of or permit to be made use of any information and material relating to the customers’ technology, technical process, business affairs or finances.
• Troubleshoot network issues such as outages, security vulnerabilities, and other system-level concerns.
• Manage information system accounts and permissions across various platforms, ensuring proper access control and security protocols are followed.
• Any other duties assigned from time to time.

Skills

ISMS

ISO/IEC 27001

Information security

Auditing

Network security

Access control

Security training

Cloud security

Risk assessment

Education

Bachelor's degree in computer technology, information systems, or related field

Tools

Palo Alto

Cisco Meraki

Active Directory (AD)

RADIUS

VPN

Job description

CloudMile in Kuala Lumpur seeks a Compliance and MIS professional to help drive ISMS governance, coordinate audits, and ensure staff adherence to information security policies. You will safeguard customer data and assist in risk and control assessments across applications and infrastructure.

The role requires a degree in IT or related field, 1–3 years of security experience, and certifications in ISO/IEC 27001.