Specialist, IT Compliance & Controls

Marsh Agency; Kuala Lumpur; Hybrid; MYR 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Hybrid work model

Professional development

Zusammenfassung

Marsh in Kuala Lumpur is seeking an IT Compliance professional to strengthen cybersecurity and operational security across the APAC region. The role combines governance, risk management and controls with hands-on vulnerability management, security metric reporting and cross‑functional collaboration with IT and business teams.

You will coordinate with vendors and stakeholders, drive remediation SLAs, support DR planning and testing, and help ensure the organisation meets regulatory and internal

Qualifikationen

• 6+ years in IT compliance, controls or cybersecurity.
• Strong project management and ability to manage multiple stakeholders.
• Attention to detail and commitment to meeting SLAs and compliance.

Aufgaben

• Monitor vulnerability management activities and remediation against SLAs.
• Oversee IT controls compliance including access reviews and MFA rollout.
• Support disaster recovery planning and annual DR testing.
• Coordinate with vendors on security requirements and third-party risk.
• Prepare weekly security metrics and monthly regional reports.

Kenntnisse

Vulnerability management

Security governance

Project management

Stakeholder management

Tools

SNYK

GitGuardian

Edgescan

Bitsight

SIEM

IAM

MFA

DARE

Jobbeschreibung

We are seeking a talented individual to join our Information Technology team, part of our risk business at Marsh. This role will be based in Kuala Lumpur, Malaysia. This is a hybrid role that has a requirement of working at least three days a week in the office.

You will support our regional IT Operations team in maintaining and enhancing our cybersecurity and operational security posture across the Asia-Pacific region. This role encompasses vulnerability management, IT operational controls compliance, risk assessment, and security metric reporting to our CISO team. You will work closely with business teams, IT compliance colleagues, and stakeholders across multiple time zones to deliver on critical security and compliance initiatives.

We Will Count On You To

• Monitor and coordinate vulnerability management activities (DAST, SAST, Pen testing, infrastructure scans, SSL certificates and protocola) and support remediation tracking to meet SLAs
• Monitor and manage IT operational controls compliance including user access reviews, service account management, multi-factor authentication rollout, password policy compliance, and risk management.
• Support disaster recovery planning and execution, including annual DR plan reviews and database restore testing
• Coordinate with vendors and business stakeholders on security requirements, third-party risk assessments, and incident response audit findings
• Prepare weekly security metrics reporting and monthly operating reports for regional leadership and the CISO team

What You Need To Have

• Approximately 6+ years of experience in IT compliance, controls, cybersecurity, or a related field with exposure to security tools and concepts
• Strong project management and administrative skills with the ability to prioritise workload and manage multiple stakeholders independently
• Demonstrated attention to detail and commitment to meeting SLAs and compliance requirements; ability to learn and grow in cyber security domain

What makes you stand out?

• Experience with cyber security concepts, vulnerability scanning tools (SNYK, GitGuardian, Edgescan, Bitsight), and security platforms (SIEM, IAM, MFA, DARE)
• Ability to work across time zones and collaborate effectively with regional and global security teams
• Demonstrated ability to lead or assist with small security-focused projects and contribute to global security posture initiatives

Why Join Our Team

• We help you be your best through professional development opportunities, interesting work and supportive leaders.
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.

Marsh is committed to providing an inclusive work environment. We aim to attract and retain the best, most qualified people and value colleagues of all backgrounds, without regard to age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.