Remote GRC Security Specialist: Risk & Compliance

NTT DATA Asia Pacific; Cyberjaya; On-site; MYR 90,000 - 130,000; Full time

Job summary

NTT DATA Asia Pacific is seeking an experienced Information Security Governance, Risk and Compliance (GRC) Specialist to strengthen our security program. You will assess risks, implement controls, ensure compliance, and drive policy development while coordinating with internal teams to improve security practices.

The role requires 5–8 years in information security, familiarity with standards and regulations, and strong communication and project management skills.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Security, Risk Management or related field.
• 5–8 years of experience in information security or related roles.
• Experience in regulated industries (e.g., financial services, technology, healthcare, telecommunications) desirable.

Responsibilities

• Implement and maintain security compliance frameworks (e.g., Data Protection Trustmark, Cyber Trust Mark, ISO/IEC 27001, GDPR, PDPA).
• Monitor adherence to internal security policies and procedures.
• Collaborates with stakeholders to ensure regulatory compliance.
• Conduct audits and assessments to identify gaps and recommend actions.
• Review client contracts and vendor agreements for cybersecurity and risk clauses.
• Participate in security awareness and training initiatives.
• Support incident response activities and investigations.

Skills

Information security

Risk assessment

Policy development

Project management

Communication

Education

Bachelor's degree

Job description

NTT DATA Asia Pacific is seeking an experienced Information Security Governance, Risk and Compliance (GRC) Specialist to strengthen our security program. You will assess risks, implement controls, ensure compliance, and drive policy development while coordinating with internal teams to improve security practices.

The role requires 5–8 years in information security, familiarity with standards and regulations, and strong communication and project management skills.