Remote GRC Security Specialist: Risk & Compliance

NTT Limited; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Remote Working

Job summary

NTT DATA, a leading global technology services provider, is seeking a seasoned Information Security Governance, Risk and Compliance (GRC) Specialist. You will assess risks, implement controls, ensure regulatory compliance, and drive security awareness across the organization.

In this remote role based in Malaysia, you will collaborate with internal teams, review contracts for cybersecurity clauses, and contribute to policy development to sustain a strong security posture.

Qualifications

• Bachelor's degree in Information Technology, Computer Science or Information Security
• 5–8 years of experience in information security or related roles
• Experience with risk assessment, compliance, security awareness or policy development
• Familiarity with information security frameworks and standards (e.g., ISO/IEC 27001, GDPR, PDPA)

Responsibilities

• Implement and maintain security compliance frameworks (e.g., Data Protection Trustmark, Cyber Trust Mark) in line with company policies
• Monitor adherence to internal security policies and procedures
• Collaborate with stakeholders to ensure regulatory compliance across the organization
• Conduct audits and assessments to identify gaps and recommend corrective actions
• Review client contracts and vendor agreements to address cybersecurity and risk clauses
• Support security awareness and training initiatives
• Assist in incident response activities and investigations as required
• Report security incidents to regulators and clients as required
• Monitor and report on security compliance metrics
• Assist in implementing security controls and best practices
• Stay updated with emerging threats and trends

Skills

Information security

Risk assessment

Compliance

Policy development

Security awareness

Project management

Communication

Detail orientation

Education

Bachelor's degree in IT/Information Security

Tools

ISO/IEC 27001

GDPR

PDPA

Job description

NTT DATA, a leading global technology services provider, is seeking a seasoned Information Security Governance, Risk and Compliance (GRC) Specialist. You will assess risks, implement controls, ensure regulatory compliance, and drive security awareness across the organization.

In this remote role based in Malaysia, you will collaborate with internal teams, review contracts for cybersecurity clauses, and contribute to policy development to sustain a strong security posture.