BAT Malaysia Hiring! Full Time Senior Cyber Risk Analyst in WP Kuala Lumpur - Ricebowl

5+ years of experience in cybersecurity, risk management, IT assurance or related roles.Degree or equivalent in Cybersecurity, Information Technology, or a related field

Adequate technical knowledge and skills enabling effective communication with IT Services, understanding risks and corresponding mitigations. Additional certifications may include Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)

Cybersecurity Fundamentals:

• Strong knowledge of security frameworks and standards (e.g., NIST RMF, ISO 27001, FAIR, COBIT) 

• Proficiency in using risk management tools and GRC platforms (e.g., ServiceNow IRM, RSA Archer).

• Understanding penetration testing and security validation processes.  

• Understanding secure cloud computing, emerging technologies, and digital platforms.  

Compliance and Regulatory Knowledge:

• Familiarity with cybersecurity regulations and standards such as GDPR, CCPA, PCI DSS, and SOX.

• Ability to assess compliance requirements and incorporate them into risk assessment procedures.    

• Risk Communication: Proficient in conveying complex cyber risks in business-relevant terms to both technical and non-technical stakeholders.

Data Analytics and Visualization:

• Ability to analyse and interpret complex data to assess risk and trends.  

• Proficiency in creating dashboards and reports using tools like PowerPoint, Power BI, or Excel.  

Project Management:

• Strong organizational skills to manage multiple concurrent initiatives.  

• Familiarity with project management methodologies to drive risk-related projects.

• Self-motivated and results focused; ability to strengthen the team and its mission.

Attention to detail and ability to manage multiple priorities in a fast-paced environment.  

Perform risk assessments to identify, assess, mitigate and prioritize cyber risks related to business processes, emerging technologies, digital platforms, and cloud-based services.

Develop and maintain positive relationships with the Enterprise Risk Management team and stakeholders from Regional and Central Functions. Create dashboards, reports, and presentations to provide leadership with clear insights into the organization's risk posture. Continuously monitor and review the effectiveness of risk management strategies, proposing necessary adjustments as needed.

Risk Reporting and Insights: Develop dashboards, reports, and presentations built to provide leadership with clear, actionable understanding of the organization's cyber security risk posture.      

Continuous Improvement and Automation: Facilitate ongoing improvement initiatives to enhance cyber risk management processes and their automation.

Cross function collaboration: Build and maintain positive relationships with both Area and Headquarters Function teams, including Enterprise Risk Management, to align risk management efforts across the organization.    

Security Audits and Assessments: Support security audits to validate the effectiveness of cyber risk management processes and identify areas for improvement.

Continuous Learning: Stay informed about the latest cybersecurity trends, threats, and guidelines, incorporating them to improve the organization’s cybersecurity posture.    

Risk Management Efficiency: Continuously review and monitor the efficiency of cyber risk mitigation approaches, recommending changes as necessary to address evolving threats.