Strategic GRC & InfoSec Risk Analyst

Petron Corporation; Petaling Jaya; On-site; MYR 60,000 - 90,000; Full time

Job summary

A leading oil company in Malaysia is seeking an IT Governance, Risk & Compliance Analyst to manage information security programs. The role involves developing security policies, conducting compliance audits, and training staff on governance and risk. Ideal candidates will have a Bachelor's Degree in IT or Computer Security, with at least 5 years of relevant experience in information security management. Strong communication skills and experience with NIST and ISO standards are essential.

Qualifications

• Minimum 5 years' experience in a similar role.
• Knowledge of IT security technologies and controls.
• Experience in developing or implementing IT policies and procedures.

Responsibilities

• Lead and improve information security control policies.
• Facilitate reviews of information security policies.
• Provide training on governance and risk management.
• Lead internal and external audits related to information security.

Skills

Information Security Management

Risk Assessment

Project Coordination

Incident Investigation

Communication Skills

Time Management

Education

Bachelor’s Degree in IT/Computer Security

Tools

ISMS Framework

NIST

ISO 27001

PCI DSS

Job description

A leading oil company in Malaysia is seeking an IT Governance, Risk & Compliance Analyst to manage information security programs. The role involves developing security policies, conducting compliance audits, and training staff on governance and risk. Ideal candidates will have a Bachelor's Degree in IT or Computer Security, with at least 5 years of relevant experience in information security management. Strong communication skills and experience with NIST and ISO standards are essential.