Senior InfoSec Compliance Lead (ISO27001/SOC2)

MEDIAMONKS MALAYSIA SDN. BHD.; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

MEDIAMONKS MALAYSIA SDN. BHD. is seeking a Senior Information Security Compliance Analyst to ensure adherence to ISO 27001/2022 and other regulations. You will safeguard customer and company data, collaborate with the global Infosec team, and drive the security program across the APAC region.

You will assess risks, manage third-party inquiries, coordinate audits, and develop awareness materials. Strong English, 5+ years in InfoSec, and a solid grasp of networking, cloud, and SDLC are essential.

Qualifications

• Bachelor's degree in Computer Science, Computer or Systems Engineering or equivalent.
• Minimum of 5 years of experience in InfoSec related positions.
• Solid knowledge of networking, cloud, infrastructure configuration, end-point protection and SDLC.
• Knowledge of ISO 27001/2, SOC2, NIST-800.
• Professional working proficiency in written and spoken English.
• Ability to confidently present findings to technical and non-technical audiences.
• Self-directed, resourceful, and a critical thinker with attention-to-detail and proactive problem-solving skills.
• Ability to self-organize and plan activities with commitment towards results.
• Ready to learn new contents both from others or self-learned.

Responsibilities

• Lead the alignment to the global ISMS (based on ISO27001:2022) over the APAC region.
• Integrate the compliance efforts in the region with the global roadmap.
• Perform routine activities to evaluate compliance with security frameworks and legislation.
• Report the compliance status of processes and technology in the region.
• Identify risk related to information security in the technical environment, the relationships with third parties or any component of the company's operations.
• Define security measures to lower the risks identified.
• Understand about technical and administrative controls in the different areas: networking, operations, access management, SSDLC, cloud security, end-point protection, physical security, third party risk assessment, organization security and legal compliance.
• Coordinate the information security assessments with 3rd parties (clients, suppliers).
• Contribute in the development of awareness material and the process of delivery and measurement.
• Coordinate and reply to internal and external audits related to information security.
• Investigate on technologies that could improve the security baseline and the compliance (e.g. DLP, end-point protection, network security, security and vulnerabilities assessment).
• Empower, assist, and mentor fellow members of the team to foster their professional growth and ensure collective success.

Skills

Risk assessment

Security governance

Audit coordination

English proficiency

Stakeholder communication

Problem solving

Planning & organization

Education

Bachelor's degree in CS/Engineering or equivalent

Job description

MEDIAMONKS MALAYSIA SDN. BHD. is seeking a Senior Information Security Compliance Analyst to ensure adherence to ISO 27001/2022 and other regulations. You will safeguard customer and company data, collaborate with the global Infosec team, and drive the security program across the APAC region.

You will assess risks, manage third-party inquiries, coordinate audits, and develop awareness materials. Strong English, 5+ years in InfoSec, and a solid grasp of networking, cloud, and SDLC are essential.