Regional IT Compliance & Security Controls Lead

ООО «ХАГЕМАЕР ГРУПП»; Kuala Lumpur; Hybrid; MYR 120,000 - 180,000; Full time

Job summary

Marsh in Kuala Lumpur is seeking an IT Compliance and Security professional to join our risk team. The hybrid role requires office presence at least three days a week and focuses on vulnerability management, IT controls compliance, risk assessment, and security metric reporting.

You'll work with regional teams across time zones to support DR planning, vendor security requirements, and incident response audits, bringing 6+ years in IT security, project management, and a detail-oriented mindset to

Qualifications

• Approximately 6+ years of experience in IT compliance, controls, cybersecurity, or a related field.
• Strong project management and administrative skills with the ability to prioritise workload and manage multiple stakeholders independently.
• Demonstrated attention to detail and commitment to meeting SLAs and compliance requirements; ability to learn and grow in cyber security domain.

Responsibilities

• Monitor and coordinate vulnerability management activities (DAST, SAST, Pen testing, infrastructure scans, SSL certificates and protocola) and support remediation tracking to meet SLAs
• Monitor and manage IT operational controls compliance including user access reviews, service account management, multi-factor authentication rollout, password policy compliance, and risk management.
• Support disaster recovery planning and execution, including annual DR plan reviews and database restore testing
• Coordinate with vendors and business stakeholders on security requirements, third-party risk assessments, and incident response audit findings
• Prepare weekly security metrics reporting and monthly operating reports for regional leadership and the CISO team

Skills

Project management

Administrative skills

Attention to detail

Tools

SNYK

GitGuardian

Edgescan

Bitsight

SIEM

IAM

MFA

DARE

Job description

Marsh in Kuala Lumpur is seeking an IT Compliance and Security professional to join our risk team. The hybrid role requires office presence at least three days a week and focuses on vulnerability management, IT controls compliance, risk assessment, and security metric reporting.

You'll work with regional teams across time zones to support DR planning, vendor security requirements, and incident response audits, bringing 6+ years in IT security, project management, and a detail-oriented mindset to