We are looking for a Security Engineer to manage client security assessments, security questionnaires and third-party security reviews. The role involves working with internal technology, cybersecurity, risk, privacy and compliance teams to provide accurate security information and supporting evidence.
Key Responsibilities
- Manage client security questionnaires, third-party security assessments (TPSAs), information requests and security audits.
- Coordinate with internal teams to collect and validate security documentation and evidence.
- Review client security requirements and provide accurate responses within agreed timelines.
- Maintain security documentation, standard responses and evidence repositories.
- Identify gaps in security controls and coordinate follow-up actions with relevant teams.
- Support compliance with applicable security frameworks and regulatory requirements, including ISO 27001, NIST CSF, BNM RMiT and Malaysia PDPA.
- Track assessment progress, turnaround times and reporting metrics.
- Communicate security controls and compliance practices clearly to business and client stakeholders.
Requirements
- Experience in cybersecurity, security assurance, technology risk or third-party risk assessments.
- Knowledge of information security controls, security frameworks and regulatory requirements.
- Experience handling security questionnaires, audits, compliance documentation or client due diligence.
- Strong documentation, analytical and communication skills.
- Good stakeholder management and coordination skills.
- Ability to explain technical security requirements in clear, business-friendly language.
Pay: RM12,000.00 - RM14,500.00 per month
Work Location: In person