Senior GRC Consultant: Cybersecurity Governance & Risk

EC-Council Group; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

EC-Council is seeking a Senior Consultant – Information Security Governance, Risk & Compliance (GRC) to deliver governance, risk, compliance, audit, and advisory engagements for clients across industries. You will independently manage workstreams, interview stakeholders, assess cybersecurity controls, and develop client deliverables.

You will mentor juniors, maintain quality and confidentiality, and contribute to governance framework development.

Qualifications

• Bachelor’s Degree in Cybersecurity, IT, IS, CS, Risk Management, or related field.
• 5–8 years of information security GRC, cybersecurity consulting, or IT risk experience.
• Knowledge of ISO/IEC 27001/27017/27018/27701, 22301, 42001; NIST CSF; CIS Controls; COBIT; SOC 2.

Responsibilities

• Deliver Information Security GRC engagements from planning through reporting.
• Conduct governance, risk, compliance, maturity, and control assessments.
• Perform risk assessments, gap assessments, audits, and control reviews.
• Develop practical recommendations and remediation roadmaps.

Skills

Information Security GRC

Client-facing

Stakeholder interviews

Education

Bachelor’s Degree in a related field

Job description

EC-Council is seeking a Senior Consultant – Information Security Governance, Risk & Compliance (GRC) to deliver governance, risk, compliance, audit, and advisory engagements for clients across industries. You will independently manage workstreams, interview stakeholders, assess cybersecurity controls, and develop client deliverables.

You will mentor juniors, maintain quality and confidentiality, and contribute to governance framework development.