Senior Cybersecurity GRC Analyst

Srpailabs.com; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Jora Malaysia is seeking an experienced Cybersecurity Governance, Risk & Compliance (GRC) Analyst to advance our security program. You will strengthen governance, manage cyber risks, and drive compliance with ISO 27001, NIST CSF, and SOC 2 across cloud and on‑prem environments.

The role covers risk assessments, audit readiness, third‑party risk, and governance reporting, with collaboration across Infrastructure, Cloud, and business teams to promote security by design.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• 6–10 years of experience in GRC, risk and compliance.
• Strong knowledge of governance, risk management and compliance practices.
• Hands-on audit support and regulatory compliance experience.

Responsibilities

• Develop, review, and maintain cybersecurity policies, standards and baselines.
• Conduct enterprise and project risk assessments and track findings.
• Manage cyber risk register with identification, assessment and treatment.
• Support ISO 27001, NIST CSF, SOC 2 compliance initiatives.
• Coordinate internal and external audits and evidence collection.
• Perform third‑party risk assessments and KPI reporting.
• Collaborate with IT, cloud, and security teams to improve posture.
• Monitor regulatory changes and document governance impact.

Skills

GRC governance

ISO 27001

NIST CSF

SOC 2

Audit readiness

Vendor risk

Education

Bachelor's degree in Cybersecurity

Tools

GRC platforms

Documentation tools

Azure & AWS security

Job description

Jora Malaysia is seeking an experienced Cybersecurity Governance, Risk & Compliance (GRC) Analyst to advance our security program. You will strengthen governance, manage cyber risks, and drive compliance with ISO 27001, NIST CSF, and SOC 2 across cloud and on‑prem environments.

The role covers risk assessments, audit readiness, third‑party risk, and governance reporting, with collaboration across Infrastructure, Cloud, and business teams to promote security by design.