Security Risk & Remediation Specialist

User Experience Researchers Pte Ltd; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

User Experience Researchers Pte Ltd in Kuala Lumpur is seeking an Information Security Specialist to support remediation of security findings and strengthen the organization's security posture. You will review risks, implement corrective actions, provide practical security guidance, and collaborate with stakeholders to ensure timely resolution of issues, while improving security processes and controls.

Strong knowledge of information security controls, risk management, and industry frameworks

Qualifications

• Strong knowledge of information security controls, risks, and threat vectors.
• Experience with security assessments against ISO 27001 or NIST CSF.
• Ability to provide practical security guidance to remediate issues.
• Strong analytical skills and fast learner.
• Excellent interpersonal, communication and organizational skills.
• Good command of English (written and spoken).

Responsibilities

• Review and remediate risk exceptions identified through internal risk management processes.
• Address security findings from IT governance, risk, and compliance (GRC) security assessments.
• Analyze security risks and recommend remediation strategies.
• Provide expert advice on security best practices to mitigate vulnerabilities.
• Collaborate with technical and business stakeholders for timely resolution of security issues.
• Support continuous improvement of security processes and controls.

Skills

Security controls

Risk assessment

ISO 27001

NIST CSF

Practical guidance

Analytical skills

Communication skills

Interpersonal skills

Job description

User Experience Researchers Pte Ltd in Kuala Lumpur is seeking an Information Security Specialist to support remediation of security findings and strengthen the organization's security posture. You will review risks, implement corrective actions, provide practical security guidance, and collaborate with stakeholders to ensure timely resolution of issues, while improving security processes and controls.

Strong knowledge of information security controls, risk management, and industry frameworks