Strategic Cyber Risk & Policy Leader

MINDTECK SOFTWARE MALAYSIA SDN BHD; Sepang; On-site; MYR 180,000 - 340,000; Full time

Job summary

Mindteck Software Malaysia Sdn Bhd seeks a Manager IT (Cybersecurity Risk & Policy) to lead governance, risk, and compliance initiatives. This role develops policies, conducts risk assessments, and ensures regulatory alignment across IT and OT environments.

You will oversee third-party risk, audits, and executive reporting while driving awareness programs and maintaining GRC platforms like Archer and ServiceNow GRC.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, IT, or related discipline.
• 7–10 years of cybersecurity governance, risk, and compliance experience.
• Strong knowledge of ISO 27001, NIST, risk management methodologies, and regulatory compliance.
• Hands-on experience with GRC platforms such as Archer, ServiceNow GRC, or similar.
• Strong analytical and stakeholder engagement skills.

Responsibilities

• Lead enterprise cybersecurity risk identification, assessment, mitigation, and monitoring activities.
• Develop, implement, and maintain cybersecurity policies, standards, and procedures.
• Ensure compliance with frameworks such as ISO 27001, NIST, GDPR, and relevant industry regulations.
• Conduct risk assessments, gap analyses, control reviews, and compliance evaluations across IT and OT environments.
• Manage third-party and vendor cybersecurity risk programs.
• Coordinate internal and external audit activities and remediation efforts.
• Provide executive reporting on risk posture, compliance status, and policy adherence.
• Deliver cybersecurity awareness and training initiatives.
• Maintain and administer GRC platforms such as Archer and related solutions.
• Monitor emerging cybersecurity threats, regulatory developments, and industry best practices.

Skills

ISO 27001

NIST

Risk management

Audits

Stakeholder engagement

Education

Bachelor's degree in Cybersecurity/IT

Tools

Archer

ServiceNow GRC

Job description

Mindteck Software Malaysia Sdn Bhd seeks a Manager IT (Cybersecurity Risk & Policy) to lead governance, risk, and compliance initiatives. This role develops policies, conducts risk assessments, and ensures regulatory alignment across IT and OT environments.

You will oversee third-party risk, audits, and executive reporting while driving awareness programs and maintaining GRC platforms like Archer and ServiceNow GRC.