Information Security Officer (ISO)
Location: Sungai Buloh, Selangor
Core Purpose
Own and drive the organization's ISO 27001 Information Security Management System (ISMS), ensuring compliance, risk management, audits, remediation tracking, and security governance while working closely with IT and business stakeholders.
Top 3 Must-Haves
- Strong technical understanding of IT infrastructure, networks, security controls, and cyber threats.
- Hands-on IT/security experience (not just operating security tools).
- Ownership mindset with strong coordination and driving capabilities.
Essential Skills
- ISO 27001 ISMS implementation and maintenance
- Risk assessment and risk register management
- Internal & external audit coordination
- Policy, procedure, and security documentation development
- Security compliance and governance
- Incident, risk, and control effectiveness reporting
- Stakeholder management and security awareness programs
Good-to-Have Skills
- Risk Management experience
- Internal Audit experience
- IEC 62443 knowledge
- Certifications: CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor
Benefits:
Application Question(s):
- Are you legally authorized to work in Malaysia
Work Location: In person