Technology Analyst - (GRC - ISO 27001)

Important note

This role follows the Australian public holiday. You are required to work on Malaysian public holiday and you will be compensated for these days with additional annual leave.

This is full onsite role.

Your working hours are 7.00 am to 4.00 pm

What's in it for you?

Diverse Security Exposure: Gain deep expertise across three critical security pillars: GRC, Security Operations, and Security Awareness.

End-to-End Risk Management: Move beyond simple checklists by managing the full lifecycle of risk from scoping and assessment to monitoring and treatment.

Governance at the Core: Play a central role in maintaining the company's compliance integrity, ensuring our financial systems and cloud infrastructure meet rigorous ISO standards.

What do you need to have to qualify for the role?

Experience in conducting end to end IT risk management from scoping to reporting.

Experience with ISO 27001 or/and ISO 3100.

Experience in policy and procedure management within cybersecurity (access management, asset management, and data/security controls etc.)

Experience in performing physical risk assessment.

Nice to have - Cloud and AI risk management experience and a Cyber Security certified.