Security Assurance & Reverse TPSA , Manager

Software International Corporation

Kuala Lumpur

On-site

MYR 90,000 - 130,000

Full time

8 days ago

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Software International Corporation in Kuala Lumpur is seeking a Reverse TPSA Manager to lead third-party security assessments and coordinate responses to client due diligence requests. You will work with Information Security, Privacy, Legal, and Compliance teams to articulate the company’s security posture and control environment while protecting confidential information.

The role emphasizes coordinating TPSA activities, responding to RFSIs, client audits, and cybersecurity questionnaires,

Qualifications

Bachelor's degree as listed or equivalent.
5–8 years in information security, governance, assurance, IT audit, and third-party risk management.

Responsibilities

Lead end-to-end client TPSA activities and security due diligence requests.
Represent cybersecurity and risk control posture in client engagements.
Coordinate evidence collection and validation of control effectiveness.
Develop TPSA performance metrics and reporting dashboards.
Support regulatory and compliance responses (ISO 27001, NIST, RMiT, PDPA).
Improve automation, standardization, and efficiency of security assessment responses.

Skills

Information Security

Security Governance

Security Assurance

IT Audit

Third-Party Risk Management

Education

Bachelor's Degree in Information Security/Cybersecurity/IT/Risk Mgmt/CS

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Security Assurance & Reverse TPSA , Manager

Software International Corporation – Kuala Lumpur, Kuala Lumpur

The Reverse TPSA Manager is responsible for managing and coordinating security, technology risk,

privacy, and compliance assessments conducted by company’s clients, brokers, consultants, and

prospective customers.

The role serves as the central point of contact for all client security due diligence activities, ensuring

timely and accurate responses to Third-Party Security Assessments (TPSAs), Requests for Security

Information (RFSIs), client audits, and cybersecurity questionnaires. The individual will work closely

with Information Security, Technology, Risk Management, Legal, Compliance, Privacy, Procurement,

and Business Units to articulate company’s security posture and control environment while

protecting confidential and proprietary information.

This role is critical in enabling business growth, strengthening client trust, and demonstrating

company's commitment to cybersecurity, operational resilience, and regulatory compliance.

Key Responsibilities

Reverse TPSA Management

Lead and manage end-to-end client Third-Party Security Assessment (TPSA) activities.

Serve as the primary coordinator for security due diligence requests from Corporate Solutions clients and prospective customers.

Review, assess, and complete security questionnaires covering cybersecurity, cloud security, data protection, operational resilience, business continuity, and regulatory compliance.

Ensure responses are accurate, consistent, evidence-based, and aligned with company’s security standards.

Track TPSA requests and ensure completion within agreed timelines and service levels.

Client Security Assurance

Represent company's cybersecurity and technology risk control environment during client due diligence engagements.

Support client discussions, workshops, and security review meetings.

Explain technical controls and security practices in clear business language suitable for nontechnical stakeholders.

Address security concerns raised by clients and coordinate responses with relevant subject matter experts.

Stakeholder Management

- Collaborate with:

o Information Security
o Data Privacy Office
o Compliance
o Operational Risk
o Corporate Solutions Business
o Third-Party Risk Management Teams

- Coordinate collection of evidence and validation of control effectiveness.

- Escalate complex security or compliance issues where required.

Documentation & Evidence Management

- Maintain a centralized repository of:

o Standard TPSA responses
o Security evidence packages
o Regulatory and compliance documentation
o Frequently requested client artifacts
o Security certifications and attestations

- Ensure all externally shared information complies with company's information classification and disclosure requirements.

- Conduct periodic reviews of security response libraries to maintain accuracy and relevance.

Regulatory & Compliance Support

- Support responses related to:

o BNM Risk Management in Technology (RMiT)
o ISO 27001
o NIST Cybersecurity Framework
o Company Group Security Standards
o Operational Resilience requirements

- Ensure client responses remain aligned with prevailing regulatory obligations and corporate policies.

Develop and maintain TPSA performance metrics and reporting dashboards.

Monitor trends in client security requirements and emerging cybersecurity expectations.

Identify recurring assessment themes and recommend process improvements.

Improve automation, standardization, and efficiency of security assessment responses.

Required Qualifications

- Bachelor's Degree in Information Security, Cybersecurity, Information Technology, Risk Management, Computer Science, or a related discipline.
- Minimum 5-8 years of experience in:
- o Information Security
- o Security Governance
- o Security Assurance
- o IT Audit
- o Third-Party Risk Management

Required Knowledge & Skills

Cybersecurity & Risk Knowledge

- Strong understanding of: