Security Assurance Manager — Client Due Diligence

Software International Corporation (M) Sdn Bhd; Kuala Lumpur; On-site; MYR 140,000 - 230,000; Full time

Job summary

Software International Corporation (M) Sdn Bhd is seeking a Security Assurance & Reverse TPSA Manager to lead client Third-Party Security Assessments, coordinate due diligence requests, and articulate the company’s security posture to stakeholders. The role requires strong governance, risk management, and regulatory knowledge, with a focus on ISO 27001 and NIST CSF.

Responsibilities include overseeing evidence management, responding to client inquiries, and driving improvements in security

Qualifications

• Bachelor's degree in a relevant field.
• 5-8 years of experience in information security, governance, assurance, IT audit, and third-party risk management.
• Knowledge of ISO 27001, NIST CSF, SOC reports, CIS controls, and PDPA Malaysia.

Responsibilities

• Lead and manage end-to-end client TPSA activities.
• Coordinate security due diligence requests from clients and prospects.
• Review and complete security questionnaires covering cybersecurity, cloud security, data protection, resilience, and compliance.
• Ensure responses are accurate, evidence-based, and aligned with security standards.
• Track TPSA requests and ensure timely completion within SLAs.
• Represent the company’s cybersecurity posture during client engagements.
• Explain controls to non-technical stakeholders and coordinate with SMEs.
• Measure TPSA performance and drive process improvements.
• Develop evidence packages and maintain regulatory documentation.

Skills

Information Security

Security Governance

Security Assurance

IT Audit

Third-Party Risk Management

Education

Bachelor's Degree in Information Security, Cybersecurity, Information Technology, Risk Management, Computer Science, or a related discipline

Job description

Software International Corporation (M) Sdn Bhd is seeking a Security Assurance & Reverse TPSA Manager to lead client Third-Party Security Assessments, coordinate due diligence requests, and articulate the company’s security posture to stakeholders. The role requires strong governance, risk management, and regulatory knowledge, with a focus on ISO 27001 and NIST CSF.

Responsibilities include overseeing evidence management, responding to client inquiries, and driving improvements in security