Skill Quotient Hiring! Full Time Manager - Third-Party Security Assessment (GRC) in Federal Territory - Ricebowl

Qualifications & Experience

• 5–8 years of experience in Information Security, Technology Risk, Security Governance, Security Assurance, IT Audit, or Third-Party Risk Management.
• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Risk Management, Computer Science, or a related discipline.

Technical & Security Knowledge

• Strong knowledge of:
• Information Security (InfoSec) governance
• Cybersecurity risk management
• Cloud security controls
• Identity and Access Management (IAM)
• Vulnerability management
• Incident response
• Data protection and privacy
• Business Continuity Planning (BCP) and Disaster Recovery (DR)

Frameworks & Regulatory Knowledge

• ISO 27001
• NIST Cybersecurity Framework (NIST CSF)
• SOC Reports
• CIS Controls
• Bank Negara Malaysia Risk Management in Technology (BNM RMiT)
• Personal Data Protection Act (PDPA) Malaysia
• Operational Resilience

Core Competencies

• Strong written and verbal communication skills.
• Effective stakeholder engagement and management.
• Strong presentation and facilitation skills.
• Analytical and critical-thinking abilities.
• Ability to map client requirements to security controls.
• Ability to identify control gaps and recommend appropriate remediation actions.

Preferred Certifications

• CISSP
• CISM
• CRISC
• CISA
• ISO 27001 Lead Auditor / Lead Implementer
• CCSP

Preferred Experience

• Experience in the insurance or financial services industry.
• Customer-facing security assurance experience.
• Experience responding to large enterprise and multinational client Third-Party Security Assessments (TPSAs).