全职 Information Security - Compliance Executive 工作, 薪水 up to MYR 7,000, Lightsup Network Solutions Federal Territory 公司招聘中 - Ricebowl

JOB SUMMARY:

We are looking for an Information Security & Compliance Executive to support the maintenance and continual improvement of our organization's information security and compliance program. The role will work closely with the Head of Cybersecurity and various departments to ensure information security policies, controls, risk management and compliance requirements are effectively implemented and maintained.

KEY RESPONSIBILITIES:

• Maintain and continually improve the organization's ISO/IEC 27001:2022 Information Security Management System (ISMS).
• Coordinate information security policies, procedures, risk assessments and control activities.
• Monitor compliance with applicable information security standards, policies and requirements.
• Coordinate internal and external audits, assessments and related activities.
• Prepare and maintain audit evidence, compliance records and supporting documentation.
• Track audit findings, corrective actions and improvement activities through to closure.
• Work with different departments to implement and maintain information security controls.
• Support security awareness, training and information security governance activities.
• Assist in reviewing and improving information security processes and controls.
• Liaise with auditors, consultants and other external stakeholders when required.
• Prepare regular compliance and security governance updates for management.
• Support other information security and compliance initiatives as required.

REQUIREMENTS:

• Bachelor's degree in Cybersecurity, Information Security, IT, Computer Science or related field.
• 3–5+ years of experience in Information Security, GRC, IT Audit, Risk or Compliance.
• Practical experience with ISO/IEC 27001 ISMS and information security controls.
• Experience supporting or participating in ISO 27001 certification and audit activities is an advantage.
• Strong documentation, coordination and project management skills.
• Good communication skills and ability to work with both technical and non-technical stakeholders.
• Able to work independently, manage multiple activities and follow through on assigned actions.
• ISO 27001 Lead Implementer / Lead Auditor certification is an advantage.
• Experience in cybersecurity, managed security services, IT services or technology environments is an advantage.

WHAT WE ARE LOOKING FOR?

A hands-on and execution-focused individual who can help turn information security requirements into practical implementation.

You should be organized, detail-oriented and comfortable working with multiple stakeholders to ensure that security controls, documentation and compliance activities are properly implemented and maintained.

Pay: RM4,000.00 - RM7,000.00 per month

Benefits:

• Gym membership
• Health insurance
• Opportunities for promotion
• Professional development

Work Location: In person