Security & Continuity Lead - ISO 27001 & BCP

TMF Administrative Services Malaysia Sdn. Bhd.; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

TMF Administrative Services Malaysia Sdn. Bhd.

is seeking a local Information Security Specialist to serve as the point of contact for information security, business continuity, emergency response and physical security across the Malaysian office. You will ensure compliance with global frameworks, ISO 27001 and ISAE 3402 where applicable, coordinate security initiatives, and support audits while maintaining effective risk management and incident reporting.

Qualifications

• Bachelor's degree in Information Security, Risk Management, or related field.
• Minimum 2 years of experience in security, compliance, or risk management.
• Familiarity with ISO 27001, BCP/ERP frameworks, and emergency response protocols.

Responsibilities

• Act as the local point of contact for information security matters.
• Ensure compliance with TMF's global Information Security Management Framework and underlying policies, procedures, and standards.
• Support internal and external audits related to information security.
• Maintain and update the local Business Continuity Plan (BCP) and align with ISO22301.
• Develop and maintain emergency response procedures for the local office.
• Oversee physical security, access control, and vendor relationships.
• Report security incidents to the GISO and coordinate risk assessments.

Skills

Information security

ISO 27001

BCP/ERP frameworks

Audits & compliance

Security awareness training

Stakeholder coordination

Education

Bachelor's degree in Information Security, Risk Management, or related field

Job description

TMF Administrative Services Malaysia Sdn. Bhd.

is seeking a local Information Security Specialist to serve as the point of contact for information security, business continuity, emergency response and physical security across the Malaysian office. You will ensure compliance with global frameworks, ISO 27001 and ISAE 3402 where applicable, coordinate security initiatives, and support audits while maintaining effective risk management and incident reporting.