Manager IT (Cybersecurity Risk & Policy)

MINDTECK SOFTWARE MALAYSIA SDN BHD; Sepang; On-site; MYR 180,000 - 340,000; Full time

Job summary

Mindteck Software Malaysia Sdn Bhd seeks a Manager IT (Cybersecurity Risk & Policy) to lead governance, risk, and compliance initiatives. This role develops policies, conducts risk assessments, and ensures regulatory alignment across IT and OT environments.

You will oversee third-party risk, audits, and executive reporting while driving awareness programs and maintaining GRC platforms like Archer and ServiceNow GRC.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, IT, or related discipline.
• 7–10 years of cybersecurity governance, risk, and compliance experience.
• Strong knowledge of ISO 27001, NIST, risk management methodologies, and regulatory compliance.
• Hands-on experience with GRC platforms such as Archer, ServiceNow GRC, or similar.
• Strong analytical and stakeholder engagement skills.

Responsibilities

• Lead enterprise cybersecurity risk identification, assessment, mitigation, and monitoring activities.
• Develop, implement, and maintain cybersecurity policies, standards, and procedures.
• Ensure compliance with frameworks such as ISO 27001, NIST, GDPR, and relevant industry regulations.
• Conduct risk assessments, gap analyses, control reviews, and compliance evaluations across IT and OT environments.
• Manage third-party and vendor cybersecurity risk programs.
• Coordinate internal and external audit activities and remediation efforts.
• Provide executive reporting on risk posture, compliance status, and policy adherence.
• Deliver cybersecurity awareness and training initiatives.
• Maintain and administer GRC platforms such as Archer and related solutions.
• Monitor emerging cybersecurity threats, regulatory developments, and industry best practices.

Skills

ISO 27001

NIST

Risk management

Audits

Stakeholder engagement

Education

Bachelor's degree in Cybersecurity/IT

Tools

Archer

ServiceNow GRC

Job description

Manager IT (Cybersecurity Risk & Policy)

About the Role

We are seeking a Cybersecurity Risk & Policy Manager to lead the organization's cybersecurity governance, risk, and compliance initiatives. This role will be responsible for developing policies, managing risk assessments, and ensuring compliance with international standards and regulatory requirements.

Key Responsibilities

• Lead enterprise cybersecurity risk identification, assessment, mitigation, and monitoring activities.
• Develop, implement, and maintain cybersecurity policies, standards, and procedures.
• Ensure compliance with frameworks such as ISO 27001, NIST, GDPR, and relevant industry regulations.
• Conduct risk assessments, gap analyses, control reviews, and compliance evaluations across IT and OT environments.
• Manage third-party and vendor cybersecurity risk programs.
• Coordinate internal and external audit activities and remediation efforts.
• Provide executive reporting on risk posture, compliance status, and policy adherence.
• Deliver cybersecurity awareness and training initiatives.
• Maintain and administer GRC platforms such as Archer and related solutions.
• Monitor emerging cybersecurity threats, regulatory developments, and industry best practices.

Required Qualifications

• Bachelor's Degree in Cybersecurity, Information Security, IT, or related discipline.
• Minimum 7-10 years of cybersecurity governance, risk, and compliance experience.
• Strong knowledge of ISO 27001, NIST, risk management methodologies, and regulatory compliance.
• Hands‑on experience with GRC platforms such as Archer, ServiceNow GRC, or similar.
• Strong analytical and stakeholder engagement skills.

Mindteck is a global software services company, offering a wide range of information technology solutions that helps our customers enhance their overall business performance. We offer a broad spectrum of IT services including Custom Application development, Application Management, Reengineering and Independent testing services in Embedded & System programming, Business Application Consulting, Storage and Infrastructure & SAP services.

We span a global presence with offices in USA, UK, Germany, Singapore, Malaysia, Middle East and India. Mindteck's customers include Fortune 500 companies, multinationals, small and medium enterprises across several industries. Our customer's business focus is diverse as well. A representative list of our customer industries include Capital Markets, High-tech Manufacturing, Insurance, Medical Equipments, Telecom, Semiconductor Manufacturing, Shipping, Smart Cards, Storage / Server, Software Products, Retail, Wireless Devices. Mindteck's flexibility allows us to work successfully with customers from numerous industries with diverse business focus, on projects of all sizes.

Please visit our website www.mindteck.com for more information