Senior IT GRC & Cyber Policy Leader

Mindteck, Inc.; Sepang; On-site; MYR 120,000 - 180,000; Part time

Job summary

Mindteck, Inc. in Malaysia seeks a Senior Executive – IT (Cybersecurity Risk & Policy) to lead governance, risk and compliance initiatives. You will develop policies, conduct risk assessments, and drive remediation with IT and business teams.

The role requires 5–7 years in cybersecurity risk, governance and compliance, familiarity with ISO 27001 and NIST CSF, and hands-on experience with GRC platforms such as RSA Archer or ServiceNow. This is a contract position based in Sepang.

Qualifications

• Bachelor’s degree in a related discipline and 5–7 years in cybersecurity risk, governance, compliance or related areas.
• Strong understanding of cybersecurity risk management and governance principles.
• Experience with ISO 27001, NIST CSF, risk management and audit processes.
• Experience handling third-party/vendor risk management is preferred.

Responsibilities

• Develop, review, maintain, and implement cybersecurity policies, standards, procedures, and guidelines.
• Conduct cybersecurity risk assessments, gap analyses, control assessments, and compliance reviews.
• Identify and monitor cybersecurity risks and recommend mitigation measures.
• Maintain risk registers, dashboards, compliance records, and audit documentation.
• Support internal and external cybersecurity audits and remediation tracking.
• Perform third-party/vendor cybersecurity risk assessments and monitor associated risks.
• Use GRC platforms to manage risk, compliance, controls, assessments, issues, and reporting.
• Monitor regulatory changes and assess impact on the organization.
• Contribute to cybersecurity awareness and security culture programs.
• Collaborate with stakeholders to strengthen cybersecurity governance and control frameworks.

Skills

Cybersecurity governance

Risk management

Compliance

Third-party risk management

Audit

Education

Bachelor's Degree in Cybersecurity, Information Technology, Information Security, Computer Science, or related discipline

Tools

RSA Archer

ServiceNow GRC

MetricStream

GRC platforms

Job description

Mindteck, Inc. in Malaysia seeks a Senior Executive – IT (Cybersecurity Risk & Policy) to lead governance, risk and compliance initiatives. You will develop policies, conduct risk assessments, and drive remediation with IT and business teams.

The role requires 5–7 years in cybersecurity risk, governance and compliance, familiarity with ISO 27001 and NIST CSF, and hands-on experience with GRC platforms such as RSA Archer or ServiceNow. This is a contract position based in Sepang.