The Information Security Officer (ISO) is responsible for managing and maintaining the organization’s Information Security Management System (ISMS) implementation and ensuring continuous compliance with ISO/IEC 27001 and related ISO 27000 standards at PSI INCONTROL SDN BHD.

The role focuses on information security governance, risk management, compliance, and audit readiness, ensuring that the organization maintains a structured and effective security posture. The ISO acts as the central coordinator for security policies, risk assessments, and audit activities, while promoting security awareness across the organization. The person works closely with the team of the CISO from PSI Software, Head of ICT, ICT Engineers, Total Quality Management Department and the IT users of the Company.

Primary Job Functions:

Implement, maintain, and continuously improve the ISMS in accordance with ISO/IEC 27001 as per the group requirements. The person will be the local execution and implementation while prioritization and approach are aligned with CF Security & Resilience, PSI Software SE.
Ensure compliance with PSI Information Security Policies and applicable regulatory or contractual requirements
Conduct information security risk assessments, maintain the risk register, and track mitigation actions
Coordinate and support internal audits, external ISO certification audits
Ensure audit remediation activities including tracking and reporting on progress and blockers
Develop, review, and maintain information security procedures, standards, and documentation
Monitor and report on information security risks, incidents, and control effectiveness
Assess the impact of system changes and new technologies on information security posture
Identify security weaknesses, recommend improvements, and coordinate implementation of corrective actions
Work with ICT teams to ensure appropriate technical and administrative security controls are in place
Drive security awareness and training initiatives for employees
Act as the point of contact for all information security-related matters within the organization

Required Attitude:

Strong analytical and problem-solving mindset with attention to detail
High level of integrity and accountability in handling sensitive information
Strong coordination, communication and stakeholder engagement skills
Ability to work independently while coordinating across departments
Committed to continuous learning in a rapidly evolving cybersecurity landscape

Required Knowledge:

Strong understanding of Information Security principles and controls
Working knowledge of ISO/IEC 27001 ISMS framework and compliance requirements
Familiarity with risk assessment methodologies and audit processes
Familiarity with industrial cybersecurity standards such as IEC 62443 is an added advantage

Required Skills:

Experience in ISMS implementation, maintenance, and audit coordination
Ability to develop and maintain policies, procedures, and security documentation
Strong technical understanding of IT infrastructure, networks, and security attacks and controls
Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor are an advantage.

Education:

Minimum Diploma or Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent

Experience:

3–5 years relevant professional Information Security experience.

Work Status:

Full-time, 2 years contract

Travel:

Moderate travel may be required.

1 Psi Incontrol Sdn Bhd Jobs - October 2026 - High Salaries

Manage Alert

Information Security Officer (ISO)