Senior GRC Consultant: Risk & Security Approvals

EC-Council Global Services; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

EC-Council is seeking a Senior Consultant to drive governance, risk management and security controls review for requests in a high-volume, ticket-driven environment. You will assess risk, ensure policy alignment and maintain audit trails while collaborating with cross-functional teams.

The role requires responsiveness, attention to detail and the ability to prioritize work by risk and business impact, all within SLA/TAT constraints across security domains.

Qualifications

• Basic to intermediate understanding of cybersecurity and networking concepts.
• Understanding of IP addresses, subnets, ports, protocols, network connectivity and security controls.
• Good understanding of cybersecurity risk concepts, including risk identification, assessment, impact and likelihood.
• Understanding of Confidentiality, Integrity and Availability (CIA) and how security risks can impact them.
• Understanding of risk treatment plans, risk mitigation and risk acceptance.
• Ability to assess the business impact and security implications of technology and security requests.
• Familiarity with ticketing/GRC platforms such as ServiceNow, Archer or similar tools.
• Strong analytical and decision-making skills.
• Strong ownership, responsiveness and accountability.
• Ability to understand urgency and prioritize requests based on risk and business requirements.
• Strong communication and stakeholder management skills.
• Ability to work effectively as a team player and collaborate with multiple technology and business teams.
• Comfortable working in a high-volume, ticket-driven environment and meeting defined SLAs/TATs.

Responsibilities

• Review and approve cybersecurity and technology-related requests based on business requirements, security policies and risk considerations.
• Assess the business justification, security implications, business impact, risk and required controls associated with requests.
• Support risk acceptance, security exception and risk register activities.
• Review requests related to network, access, endpoint, cloud and other security controls.
• Work closely with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams to clarify requirements and resolve queries.
• Manage requests through ServiceNow, Archer or similar ticketing/GRC platforms.
• Understand the urgency and business impact of requests and prioritize work appropriately.
• Ensure requests are reviewed and actioned within agreed SLA/TAT requirements.
• Maintain appropriate documentation and audit trails for reviews and approvals.
• Support the wider GRC team with other governance and risk activities as required.

Skills

GRC basics

Risk assessment

Ticketing systems

ServiceNow

Archer

Network security

Stakeholder mgmt

Analytical skills

Communication

Tools

ServiceNow

Archer

Job description

EC-Council is seeking a Senior Consultant to drive governance, risk management and security controls review for requests in a high-volume, ticket-driven environment. You will assess risk, ensure policy alignment and maintain audit trails while collaborating with cross-functional teams.

The role requires responsiveness, attention to detail and the ability to prioritize work by risk and business impact, all within SLA/TAT constraints across security domains.