Strategic ISMS & ISO 27001 Leader (InfoSec)

Guidelines On Tranglos Look and Feel; Kuala Lumpur; On-site; MYR 300,000 - 540,000; Full time

Job summary

Tranglo is seeking a Senior Manager of Information Security to lead enterprise governance, risk management, and compliance initiatives at an executive level. You will advise the C-suite and Board on cyber risk and regulatory alignment, focusing on strategic architecture and certification efforts.

You will design the ISMS framework, oversee ISO 27001:2022 certification activities, and provide strategic oversight to the Information Security Manager responsible for day-to-day enforcement.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Cybersecurity, Computer Science, or a related field.
• 8–10+ years in Information Security with at least 3–5 years in strategic leadership or governance.
• Proven track record in ISO 27001:2022 certification or transition audits in regulated environments.
• Active executive security certifications: CISSP, CISM, or CRISC.
• ISO/IEC 27001:2022 Lead Auditor or Lead Implementer certification is highly preferred.
• Financial Services/Fintech/Banking sector experience with regulatory rigor.

Responsibilities

• Lead and manage the enterprise ISMS architecture across Tranglo.
• Drive and oversee ISO/IEC 27001:2022 certification or transition efforts and liaise with external auditors.
• Define and publish enterprise security policies, standards, and strategic security objectives.
• Ensure alignment with BNM RMiT, PDPA, and other global financial regulations.
• Own and maintain enterprise information security risk registers and governance dashboards.
• Provide strategic oversight to the Information Security Manager and mentor security teams.

Skills

Stakeholder management

Strategic critical thinking

Executive communication

Detail-oriented execution

Education

Bachelor’s or Master’s degree in Information Security/Cybersecurity/CS

CISSP/CISM/CRISC certification

Lead Auditor/Lead Implementer ISO 27001:2022 (preferred)

Job description

Tranglo is seeking a Senior Manager of Information Security to lead enterprise governance, risk management, and compliance initiatives at an executive level. You will advise the C-suite and Board on cyber risk and regulatory alignment, focusing on strategic architecture and certification efforts.

You will design the ISMS framework, oversee ISO 27001:2022 certification activities, and provide strategic oversight to the Information Security Manager responsible for day-to-day enforcement.