Senior Information Security GRC Specialist — Remote

NTT MSC Sdn Bhd; Selangor; On-site; MYR 100,000 - 180,000; Full time

Job summary

NTT DATA is seeking an Information Security Governance, Risk and Compliance Specialist to strengthen our security program. You will assess risks, implement controls, ensure regulatory compliance, and lead security awareness initiatives.

The role requires 5–8 years in information security, knowledge of ISO/IEC 27001, GDPR/PDPA, strong communication and project management skills. This remote role collaborates with stakeholders across APAC to improve security posture and report metrics.

Qualifications

• Bachelor’s degree or equivalent in Information Technology, Computer Science, Information Security, Risk Management or related field.
• 5 to 8 years of information security experience.
• Experience in regulated industries is desirable.

Responsibilities

• Implement, and maintain security compliance frameworks (e.g., ISO/IEC 27001, GDPR, PDPA) in line with company policies.
• Monitor adherence to internal security policies and procedures.
• Collaborates with internal stakeholders to ensure compliance with industry standards and regulations.
• Conduct regular audits and assessments to identify gaps and recommend corrective actions.
• Review client contracts and vendor agreements to ensure cybersecurity and risk-related clauses are addressed.
• Participates in security awareness and training initiatives.
• Supports incident response activities and investigations as required.
• Ensure timely reporting of security incidents to regulators and clients as required.
• Monitors and reports on security compliance metrics.
• Assists in the implementation of security controls and best practices.
• Stays updated with emerging security threats and trends.
• Performs any other related task as required.

Skills

Information security

Risk assessment

Compliance

Policy development

Security awareness

Project management

Communication

Education

Bachelor’s degree or equivalent in Information Technology, Computer Science, Information Security, Risk Management or related field

Job description

NTT DATA is seeking an Information Security Governance, Risk and Compliance Specialist to strengthen our security program. You will assess risks, implement controls, ensure regulatory compliance, and lead security awareness initiatives.

The role requires 5–8 years in information security, knowledge of ISO/IEC 27001, GDPR/PDPA, strong communication and project management skills. This remote role collaborates with stakeholders across APAC to improve security posture and report metrics.