IT Security Policy & Compliance | ISMS Executive @ PJ

ASK Headhunter; Selangor; On-site; MYR 60,000 - 80,000; Full time

Job summary

A recruitment agency in Malaysia is seeking an ISMS Executive to oversee IT security governance and compliance. The ideal candidate will have a Bachelor's degree in computer technology or related fields, alongside 3-4 years of related experience. Responsibilities include developing IT security policies, preparing reports, and reviewing security risks. Strong communication skills and a solid understanding of ISO/IEC 27001 are necessary for this role. This position offers the opportunity to significantly contribute to improving the organization's IT security posture.

Qualifications

• 3-4 years of working experience related to information security practices.
• Good understanding of ISO/IEC 27001.
• Knowledge of IT and network architecture.
• Ability to educate technical and non-technical staff on computer security.
• Knowledge of cybersecurity standards/frameworks.

Responsibilities

• Carry out IT security governance review monthly.
• Develop IT Security policies and guidelines.
• Prepare all IT security reports on behalf of ISMS Manager.
• Review identified IT security risks and breaches.

Skills

Communication skills

Interpersonal skills

Analytical skills

Problem-solving skills

Education

Bachelor's degree in computer technology or related field

Tools

Antivirus systems

Firewalls

Data centres

Job description

IT Security Policy & Compliance | ISMS Executive @ PJ

• Carry out IT security governance review monthly and when required.
• Develop IT Security policies and guidelines that apply across company.
• Develop IT security checklists to be followed as per the approved IT security policies / procedures / guidelines.
• Develop and implement IT security governance procedures.
• Prepare all IT security reports on behalf of ISMS Manager.
• Review identified IT security risks and breaches upon identification/occurrence to ensure the organisation’s IT assets and digital information are appropriately secured.
• Deliver IT security awareness training at company.
• Bachelor's degree in computer technology, information systems, or a related field
• Possess at least 3-4 years of working experience related to information security practices
• MUST possess good understanding on ISO/IEC 27001
• Good knowledge of IT and network architecture
• Strong communication and interpersonal skills
• Ability to educate technical and non-technical staff on computer security
• Knowledge on cybersecurity standards/frameworks
• Experience with antivirus systems, firewalls, data centres, and software updates
• Strong analytical and problem-solving skills