Senior GRC Security Consultant — Risk & Compliance

EC-Council Group; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

EC-Council is the world's leading cybersecurity certification body and seeks a Senior Consultant – GRC to deliver governance, risk, compliance and advisory engagements across industries. You will manage assigned workstreams, conduct stakeholder interviews and workshops, assess controls, and develop high-quality client deliverables.

You will mentor junior consultants, support certification readiness, and help develop practical remediation roadmaps while upholding the highest standards of

Qualifications

• Bachelor’s degree in cybersecurity, IT, or related field.
• 4–7 years in Information Security GRC or related consulting roles.
• Experience in client-facing engagements and producing risk-based deliverables.
• Knowledge of ISO 27001, NIST, and other frameworks.
• Familiarity with Malaysian regulations like BNM, MCMC is a plus.
• Professional certifications such as CISA, CISM, or CISSP are advantageous.

Responsibilities

• Lead GRC engagements from planning to reporting.
• Perform governance, risk, compliance, and audit assessments.
• Develop remediation roadmaps and management presentations.
• Mentor junior consultants and review work.
• Coordinate with clients and stakeholders to ensure timely delivery.

Skills

GRC consulting

Information Security

Regulatory compliance

Risk assessment

Audit

Education

Bachelor’s Degree in Cybersecurity, IT, or related field

Job description

EC-Council is the world's leading cybersecurity certification body and seeks a Senior Consultant – GRC to deliver governance, risk, compliance and advisory engagements across industries. You will manage assigned workstreams, conduct stakeholder interviews and workshops, assess controls, and develop high-quality client deliverables.

You will mentor junior consultants, support certification readiness, and help develop practical remediation roadmaps while upholding the highest standards of