Senior GRC Consultant – Information Security

EC-Council Global Services; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

EC-Council invites an experienced Senior Consultant to join its GRC practice in Malaysia. You will deliver governance, risk and compliance engagements, work with clients across industries, interview stakeholders, assess controls, and produce high-quality reports and roadmaps.

The role requires 4–7 years in GRC or cybersecurity consulting, strong knowledge of ISO 27001, NIST CSF, and related standards, and the ability to mentor junior staff while maintaining professional integrity and client

Qualifications

• Bachelor’s degree in a cybersecurity or IT discipline.
• 4–7 years of experience in Information Security GRC or related consulting.
• Experience in client-facing consulting is highly preferred.

Responsibilities

• Deliver Information Security GRC engagements from planning through reporting.
• Conduct governance, risk and compliance assessments.
• Perform information security risk assessments and gap analyses.
• Carry out cybersecurity audits and control assessments.
• Assess design adequacy and operating effectiveness of controls.
• Conduct stakeholder interviews, workshops, and evidence reviews.
• Identify gaps and provide practical, risk-based recommendations.
• Prepare assessment reports, risk registers, and remediation roadmaps.
• Develop and review information security policies and governance documents.
• Mentor junior consultants and ensure quality across engagements.
• Maintain confidentiality, integrity, and high professional standards.

Skills

Information security governance

Cybersecurity risk management

Compliance & audits

Stakeholder interviews

Client-facing consulting

Control assessments

Policy review

Mentoring juniors

Education

Bachelor’s degree in Cybersecurity/IT/Info Systems/Risk Management

Tools

ISO/IEC 27001

COBIT

NIST CSF

SOC 2

Job description

EC-Council invites an experienced Senior Consultant to join its GRC practice in Malaysia. You will deliver governance, risk and compliance engagements, work with clients across industries, interview stakeholders, assess controls, and produce high-quality reports and roadmaps.

The role requires 4–7 years in GRC or cybersecurity consulting, strong knowledge of ISO 27001, NIST CSF, and related standards, and the ability to mentor junior staff while maintaining professional integrity and client