Local Information Security & Compliance Lead

TMF Administrative Services Malaysia Sdn. Bhd.; Kuala Lumpur; On-site; MYR 120,000 - 170,000; Full time

Job summary

TMF Administrative Services Malaysia Sdn. Bhd. is seeking a Manager - Client Business Security to act as the local point of contact for information security matters and ensure compliance across frameworks. You will coordinate audits, manage risk reviews, and drive security awareness and resilience across the Malaysian office.

The role involves leading business continuity, emergency response planning, and physical security controls while aligning local practices with global TMF standards.

Qualifications

• Experience in information security governance and risk management.
• Familiarity with ISO 27001, ISAE 3402 and related controls.
• Ability to coordinate audits and remediation actions.

Responsibilities

• Act as the local point of contact for all information security matters.
• Ensure compliance with TMF's global Information Security Management Framework and policies.
• Support internal and external audits related to information security.
• Follow up on corrective and preventive actions for non-conformities.
• Report and escalate security incidents to the GISO.
• Coordinate asset and process owners for risk reviews and asset lists.
• Conduct periodic security awareness training for staff.
• Develop and maintain business continuity and emergency response plans.
• Oversee physical security and access control measures.
• Prepare reports on security incidents, audit findings, and risks.

Skills

Information security

ISO 27001

ISAE 3402

Auditing

BCM

Job description

TMF Administrative Services Malaysia Sdn. Bhd. is seeking a Manager - Client Business Security to act as the local point of contact for information security matters and ensure compliance across frameworks. You will coordinate audits, manage risk reviews, and drive security awareness and resilience across the Malaysian office.

The role involves leading business continuity, emergency response planning, and physical security controls while aligning local practices with global TMF standards.