OT Security - GRC Specislist

Skill Quotient Resources; Kajang; On-site; MYR 90,000 - 130,000; Full time

Job summary

Skill Quotient Resources in Kajang, Selangor invites an experienced cybersecurity professional to lead IT/OT risk management initiatives across 13 countries. You will develop and embed risk management processes, revise security governance, and drive continuous improvement in enterprise risk and assurance for cyber security across client environments.

The role requires 9+ years in cybersecurity or IT/OT risk management, with certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead

Qualifications

• 9+ years of experience in cybersecurity, IT/OT risk management, or information security.
• Holds relevant risk management or Cybersecurity certifications, such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor.
• Strong working knowledge of current IT risks and threat landscapes, security implementation practices, and common operating systems and enterprise software platforms.
• Demonstrated experience in developing and implementing risk management frameworks specifically for industrial and automation environments (OT).
• Excellent analytical, problem- solving, communication, and interpersonal skills.

Responsibilities

• To support the development, embedment, and execution of risk management processes for IT and OT across 13 countries for the client's including affiliates
• To support in establishment and maintenance of the Enterprise Risk and Assurance processes of cyber security including, revising, documenting, communication, and embedding.
• To support the implementation and ongoing improvements and automation of cybersecurity Enterprise Risk and Assurance process including continuous adjustments to reflect rapid evaluation of risk and business landscape and to ensure effective integration with other company and country processes
• To support initiatives needed to build change and awareness of cyber risk management to client-wide including designing and preparing training materials and conducting training sessions.

Skills

Cybersecurity experience

IT/OT risk management

Information security

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Threat landscape assessment

Security implementation practices

OT risk frameworks

Analytical & communication skills

Job description

Skill Quotient Resources – Kajang, Selangor

• 9+ years of experience in a relevant field such as cybersecurity, IT/OT risk management, or information security.
• Holds relevant risk management or Cybersecurity certifications, such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor.
• Strong working knowledge of:

Responsibility

Required Skills

• 9+ years of experience in a relevant field such as cybersecurity, IT/OT risk management, or information security.
• Holds relevant risk management or Cybersecurity certifications, such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor.
• Strong working knowledge of:

• Current IT risks and threat landscapes
• Security implementation practices
• Common computer operating systems and enterprise software platforms.

• Demonstrated experience in developing and implementing risk management frameworks specifically for industrial and automation environments (OT).
• Excellent analytical, problem- solving, communication, and interpersonal skills.

Responsible

• To support the development, embedment, and execution of risk management processes for IT and OT across 13 countries for the client's including affiliates
• To support in establishment and maintenance of the Enterprise Risk and Assurance processes of cyber security including, revising, documenting, communication, and embedding.
• To support the implementation and ongoing improvements and automation of cybersecurity Enterprise Risk and Assurance process including continuous adjustments to reflect rapid evaluation of risk and business landscape and to ensure effective integration with other company and country processes
• To support initiatives needed to build change and awareness of cyber risk management to client-wide including designing and preparing training materials and conducting training sessions.