Senior GRC Consultant: Security Risk & Compliance

EC-Council Group; Kuala Lumpur; On-site; MYR 120,000 - 210,000; Full time

Job summary

EC-Council is seeking a Senior Consultant to support governance, risk management, and security controls reviews. The role focuses on fast-paced ticket handling, risk assessment, and collaboration with technical and business teams to ensure compliant and timely responses.

Responsibilities include reviewing requests, managing risk, and maintaining audit trails, with an emphasis on SLA adherence and cross-functional coordination across security, network, cloud, and IT operations.

Qualifications

• Basic to intermediate understanding of cybersecurity and networking concepts.
• Understanding of IP addresses, subnets, ports, protocols and security controls.
• Strong grasp of cybersecurity risk concepts including identification, assessment, impact and likelihood.
• Knowledge of CIA triad and how security risks affect it.
• Understanding of risk treatment, mitigation and acceptance processes.
• Ability to assess business impact and security implications of requests.
• Familiarity with ticketing/GRC platforms such as ServiceNow and Archer.
• Strong analytical and decision-making abilities.
• Ownership, responsiveness and accountability.
• Ability to prioritize requests based on risk and urgency.
• Strong communication and stakeholder management skills.
• Team player who can collaborate with multiple tech/business teams.
• Comfort with high-volume, ticket-driven environments and SLAs.

Responsibilities

• Review and approve cybersecurity and technology-related requests based on requirements, policies and risk.
• Assess business justification, security implications, impact and required controls.
• Support risk acceptance, security exceptions and risk register activities.
• Review requests related to network, access, endpoint, cloud and other controls.
• Collaborate with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams to clarify needs.
• Manage requests through ServiceNow, Archer or similar platforms.
• Understand urgency and prioritize work based on risk and business needs.
• Ensure reviews and actions occur within SLA/TAT requirements.
• Maintain documentation and audit trails for reviews and approvals.
• Assist the broader GRC team with governance and risk activities.

Skills

Cybersecurity basics

Risk assessment

SLA prioritization

ServiceNow

Archer

Stakeholder mgmt

Documentation

Team collaboration

Tools

ServiceNow

Archer

Job description

EC-Council is seeking a Senior Consultant to support governance, risk management, and security controls reviews. The role focuses on fast-paced ticket handling, risk assessment, and collaboration with technical and business teams to ensure compliant and timely responses.

Responsibilities include reviewing requests, managing risk, and maintaining audit trails, with an emphasis on SLA adherence and cross-functional coordination across security, network, cloud, and IT operations.