Lead, IT Security Compliance Analyst

Dagang Nexchange Berhad; Cyberjaya; On-site; MYR 200,000 - 250,000; Full time

Job summary

A leading tech firm located in Cyberjaya is seeking an experienced IT Security Compliance Officer. The ideal candidate will develop and implement IT policies, ensure compliance with ISMS certification, and monitor IT security procedures across various stakeholders. Applicants should hold a degree in a relevant field, have significant experience in IT security compliance, and possess strong analytical skills. Proficiency in English and Bahasa Malaysia is essential for this role.

Qualifications

• Bachelor's degree in relevant field preferred.
• 8 to 10 years of experience in IT Security Compliance.
• CISM certification or equivalent is an advantage.

Responsibilities

• Develop and implement IT policies in compliance with regulations.
• Maintain ISMS certification and monitor its compliance.
• Provide updates to Group IT on security initiatives.

Skills

Information Technology & Networking

Identifying security threats

Analytical skills

Critical thinking skills

Education

Bachelor's Degree in Computer Science/Information Security/Information Technology/Security Technology

Job description

• Develop, document, and implement the IT policies and procedures in compliance with relevant legislation, regulations, and accreditation standards and requirements
• Implementing and maintaining Information Security Management System (ISMS) certification
• Ensure compliance with the IT Security Policy and ISMS certification as established by the Group
• Monitor compliance to the IT security policies and procedures among employees, clients, vendors, and other third parties
• Provide regular updates to Group IT on any IT security initiatives
• Monitor internal control systems to ensure that appropriate information access levels and security clearances are maintained
• Track advancements and developments in IT security technologies and changes in IT industry standards.

Requirements:

• Qualification: Bachelor's Degree, Post Graduate Diploma or Professional Degree in Computer Science/Information Security/Information Technology/Security Technology or equivalent
• ISACA Certified Information Security Manager (CISM) and ISMS implementer and Lead Auditor Certification will be added advantage.
• Required skill(s): Hands on experience in Information Technology & Networking, identifying security threats, strong analytical and critical thinking skills.
• Key quality(s): Able to work independently, team player, result oriented, high level of attention to details, proactive, ability to multitask, and problem solving.
• Required language(s): English and Bahasa Malaysia
• Desired experience/exposure: Minimum 8 to 10 years working experience in IT Security Compliance, Risk Assessment & Security Controls Implementation and 5 years’ experience in Security Networking and Servers Administration.