Vendor Cyber Risk Lead — Protect & Align Security

S&P Global; Kuala Lumpur; On-site; MYR 120,000 - 160,000; Full time

Job summary

A leading financial information provider in Kuala Lumpur seeks a Vendor Risk Analyst to manage Supply Chain Cyber risks and conduct vendor assessments. The role requires strong communication and cybersecurity knowledge, with a focus on evaluating vendor information security policies. Candidates should have a background in Information Security, a Bachelor's degree, and at least 8 years of relevant experience. This position offers the opportunity to enhance processes in a regulated environment, contributing to organizational cybersecurity.

Benefits

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Retail discounts

Qualifications

• Minimum 8 years of experience in Information Security or Technology Risk Management.
• Prior exposure to vendor risk management and privacy laws is a plus.
• Demonstrable understanding of technology controls and information security controls.

Responsibilities

• Conduct thorough Cybersecurity and risk assessments for Vendors.
• Collaborate with internal teams to identify critical vendors.
• Communicate risk assessment findings to key stakeholders.

Skills

Communication skills

Cybersecurity knowledge

Critical thinking

Organizational skills

Education

Bachelor’s degree in computer science or engineering

Tools

Public cloud technologies (AWS, Azure, Google Cloud)

Job description

A leading financial information provider in Kuala Lumpur seeks a Vendor Risk Analyst to manage Supply Chain Cyber risks and conduct vendor assessments. The role requires strong communication and cybersecurity knowledge, with a focus on evaluating vendor information security policies. Candidates should have a background in Information Security, a Bachelor's degree, and at least 8 years of relevant experience. This position offers the opportunity to enhance processes in a regulated environment, contributing to organizational cybersecurity.