Local Security Officer (LSO)

TMF Group; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

TMF Group in Kuala Lumpur seeks a Manager - Client Business Security to lead information security, business continuity, emergency response, physical security, and compliance for the local office. You will be the local ISMS/BCMS owner, coordinate audits, and drive security improvements.

Responsibilities include developing procedures, conducting drills, liaising with authorities, and reporting incidents to the GISO, with collaboration across regional teams and vendors.

Responsibilities

• Act as the local point of contact for information security matters.
• Ensure compliance with TMF's Information Security Management Framework and standards.
• Support internal and external audits related to information security.
• Co-ordinate with asset and process owners for risk reviews.
• Conduct periodic security awareness training for staff.
• Maintain and update the local Business Continuity Plan.
• Coordinate regular BCP testing and simulations.
• Support the implementation of BCMS ISO22301.
• Liaise with global and regional BCP teams to align local plans with corporate standards.
• Develop and maintain emergency response procedures for the local office.
• Conduct regular emergency drills (fire evacuation, lockdown).
• Coordinate with building management during emergencies.
• Ensure emergency contact lists and protocols are up to date.
• Oversee access control, visitor management, and office security measures.
• Conduct regular security risk assessments and vendor management.
• Ensure compliance with local laws related to security and safety.
• Prepare and submit regular security incident and audit reports.
• Participate in regional and global security meetings.

Job description

Job ID

37030

Location

Kuala Lumpur, Malaysia, Malaysia

Work Types

Full Time, Permanent

Categories

Administration

1. Information Security (ISMS)

• Act as the local point of contact for all information security matters.

• Ensure compliance with TMF's global Information Security Management Framework and underlying policies, procedures, and standards.

• Ensure compliance with ISO 27001 and ISAE 3402 standards.

• Support internal and external audits related to information security.

• Follow up on the closure of the corrective and preventive action plan for the reported non-conformities and observations.

• Report and elevate security incidents to the Global Information Security Officer (GISO).

• Co-ordinating with asset and process owners for periodic review of asset list and risk assessment.

• Conduct periodic security awareness training for staff.

2. Business Continuity Planning (BCP)

• Maintain and update the local Business Continuity Plan.

• Coordinate regular BCP testing and simulations.

• Ensure critical business functions are identified and recovery strategies are in place.

• Support the implementation of the Business Continuity Management System (BCMS) ISO22301

• Liaise with global and regional BCP teams to align local plans with corporate standards.

3. Emergency Response Planning (ERP)

• Develop and maintain emergency response procedures for the local office.

• Conduct regular emergency drills (e.g., fire evacuation, lockdown).

• Coordinate with building management and local authorities during emergencies.

• Ensure emergency contact lists and communication protocols are up to date.

4. Physical Security

• Oversee access control systems, visitor management, and office security measures.

• Conduct regular security risk assessments and recommend improvements.

• Manage relationships with security vendors and service providers.

5. Compliance & Reporting

• Ensure compliance with local laws and regulations related to security and safety.

• Prepare and submit regular reports on security incidents, audit findings, and risk assessments

• Participate in regional and global security meetings and initiatives.

Apply

Manager - Client Business Security

Closing 30-Sep-2026