Regional IT Compliance & Security Controls Specialist

MY009 Marsh & McLennan Asia Business Services Sdn. Bhd.; Kuala Lumpur; Hybrid; MYR 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Professional development opportunities

Competitive benefits

Job summary

Marsh Risk in Kuala Lumpur seeks an IT security professional to support our regional IT Operations team, focusing on cybersecurity and operational security across the Asia-Pacific region. This is a hybrid role requiring three days in the office weekly.

You will collaborate with business and IT compliance peers, drive vulnerability management, risk assessments, and security metric reporting to the CISO team to strengthen controls and compliance across multiple time zones.

Qualifications

• Approximately 6+ years of experience in IT compliance, controls, cybersecurity, or a related field with exposure to security tools and concepts
• Strong project management and administrative skills with the ability to prioritise workload and manage multiple stakeholders independently
• Demonstrated attention to detail and commitment to meeting SLAs and compliance requirements; ability to learn and grow in cyber security domain

Responsibilities

• Monitor and coordinate vulnerability management activities (DAST, SAST, Pen testing, infrastructure scans, SSL certificates and protocola) and support remediation tracking to meet SLAs
• Monitor and manage IT operational controls compliance including user access reviews, service account management, multi-factor authentication rollout, password policy compliance, and risk management.
• Support disaster recovery planning and execution, including annual DR plan reviews and database restore testing
• Coordinate with vendors and business stakeholders on security requirements, third-party risk assessments, and incident response audit findings
• Prepare weekly security metrics reporting and monthly operating reports for regional leadership and the CISO team

Skills

Cyber security concepts

Vulnerability management

IT compliance

Project management

Stakeholder management

Tools

SIEM

IAM

MFA

Job description

Marsh Risk in Kuala Lumpur seeks an IT security professional to support our regional IT Operations team, focusing on cybersecurity and operational security across the Asia-Pacific region. This is a hybrid role requiring three days in the office weekly.

You will collaborate with business and IT compliance peers, drive vulnerability management, risk assessments, and security metric reporting to the CISO team to strengthen controls and compliance across multiple time zones.