Senior IT - Government Risk Compliance Analyst

Microchip Operations (Malaysia) Sdn. Bhd; Bayan Lepas; On-site; MYR 80,000 - 120,000; Full time

Job summary

A global technology company is seeking a Senior IT Governance Risk Compliance Analyst in Penang, Malaysia. This role involves supporting compliance initiatives, performing risk assessments, and collaborating with auditors. The ideal candidate should have a Bachelor’s degree, 5+ years of relevant experience, and expertise in IT general controls and compliance frameworks like ISO 27001. Benefits include medical, dental, and vision insurance, along with education support.

Benefits

Medical, Dental, and Vision Insurance

Parking facilities

Education support

Other benefits available

Qualifications

• 5+ years of experience in GRC, IT audit, or IT compliance roles.
• Ability to educate on compliance framework and control implementations.
• Excellent communication skills and ability to work cross-functionally.

Responsibilities

• Support and maintain the Information Security Management System (ISMS).
• Perform risk assessments and control testing for compliance.
• Monitor and report on compliance status and audit findings.

Skills

IT General Controls (ITGCs)

ISO 27001

TISAX

SOX compliance

Risk assessment

Collaboration with auditors

Analytical skills

Education

Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field

Tools

ServiceNow

Diligent

Job description

Senior IT - Governance Risk Compliance Analyst

Microchip Technology Inc. is seeking an experienced Senior IT GRC Analyst with a strong foundation in IT audit and information security controls to support our compliance initiatives, including ISO 27001 and TISAX. This role will play a key part in maintaining our governance, risk, and compliance frameworks, performing control assessments, and ensuring alignment between IT operations, security, and business objectives.

The ideal candidate has hands‑on experience assessing IT controls and risks, collaborating with auditors, and supporting global compliance and certification programs.

Key Responsibilities

• Support and maintain the Information Security Management System (ISMS) aligned with ISO 27001 and TISAX requirements.
• Perform risk assessments, control testing, and gap analysis to ensure IT controls meet internal and external standards.
• Assist in preparing for internal and external audits, including evidence collection, walkthroughs, and remediation tracking.
• Work closely with IT, security, and business stakeholders to document and strengthen IT general controls (ITGCs).
• Monitor and report on compliance status, control performance, and audit findings.
• Help mature enterprise GRC processes, including risk management, policy governance, and issue tracking.
• Support continuous improvement initiatives in security, compliance, and audit readiness.
• Stay current on emerging standards, frameworks, and best practices (ISO 27001:2022, TISAX, SOC 2, NIST, etc.).

Qualifications/Requirements

• Bachelor’s degree in information systems, Computer Science, Accounting, or a related field.
• 5+ years of experience in GRC, IT audit, or IT compliance roles.
• Strong understanding of IT General Controls (ITGCs) across domains such as access management, change management, operations, and security.
• Experience supporting ISO 27001, TISAX, SOC 2, or similar compliance frameworks.
• Ability to educate and guide on compliance framework and control implementations.
• Familiarity with risk and control frameworks (e.g., COBIT, NIST, COSO).
• Excellent communication skills and ability to work cross‑functionally with global teams.
• Detail‑oriented with strong analytical and documentation skills.

Preferred Skills

• Relevant certifications: CISA, CRISC, CISM, CISSP, and CGEIT.
• Experience using GRC tools such as ServiceNow and Diligent.
• Prior experience in manufacturing or automotive environment.

Benefits

• Medical, Dental, and Vision Insurance
• Parking, Mother’s room, and Moms‑to‑be Carpark
• Education support
• Other benefits available