Remote Senior ISMS & InfoSec Leader - Risk & Policy

NTT Global Data Centers CBJ1 Sdn. Bhd.; Selangor; Remote; MYR 180,000 - 280,000; Full time

Job summary

NTT Global Data Centers seeks a Senior Information Security Management Specialist to lead the organization’s information security program, focusing on cybersecurity and policy management. You will manage the ISMS, conduct risk assessments, develop policies, and align with standards and regulations while fostering security awareness across the company.

The role requires extensive experience in information security, audits, and regulatory compliance, with strong communication and project

Qualifications

• Advanced understanding of information security frameworks and standards.
• Experience conducting risk assessments and analyzing security controls.
• Ability to develop and maintain information security policies and procedures.

Responsibilities

• Ensure ISO 27001:2022 compliance and internal/external audits.
• Lead risk assessments and gap analyses with mitigation strategies.
• Develop and maintain information security policies, standards, and procedures.
• Collaborate with legal/compliance to meet regulatory requirements.
• Provide guidance to junior team members and conduct security awareness training.
• Support incident response activities and continuous program improvement.
• Coordinate policy management and external certification efforts.
• Engage in other security-related tasks as needed.

Skills

ISMS expertise

Risk assessment

Policy management

Communication skills

Project management

Education

Bachelor’s degree in IT/CS

Job description

NTT Global Data Centers seeks a Senior Information Security Management Specialist to lead the organization’s information security program, focusing on cybersecurity and policy management. You will manage the ISMS, conduct risk assessments, develop policies, and align with standards and regulations while fostering security awareness across the company.

The role requires extensive experience in information security, audits, and regulatory compliance, with strong communication and project