Security GRC Engineer

Why Should You Apply For The Job

1.Working in fast growing multi-national company with strong presence in Malaysia.
2.Great career exposure and personal development opportunity.
3.Good remuneration package, and working in a young and vibrant environment.

Job Description

Our client is looking for passionate technology cybersecurity professionals with Governance, Risk and Compliance (GRC) management experience to be part of the Company’s Information Security team.

Qualified candidates are expected to:

– Define, manage and update the Company’s information security policies, standards, and processes in coordination with different business functions to protect infrastructure, business-critical data and customer information
– Ensure policies are consistently applied across the Company and monitor adherence to the defined governance principles to ensure expected value is delivered.
– Work closely with Compliance, Data Privacy and Legal team on new project security reviews, including cybersecurity risk evaluation, assessment, treatment, monitoring to assure high risks are mitigated to acceptable level, and help stakeholders make well-informed decisions.
– Liaise with Compliance and various Technology teams on regulator inspection, external audit, customer queries, security certificate programs, and internal audit projects to assure compliance with financial regulations and customer requirements.

Requirements

– BS/MS in Computer Science / Cybersecurity with 5-10 years experience in cyber security or information technology risk management in the financial industry
– Experience maintaining information security standards and regulations such as PCI DSS, ISO27001, GDPR, PSD2, SWIFT CSP, and MAS TRM guidelines
– Excellent relationship building and communication skills with the ability to engage people from diverse cultures and different levels
Good stakeholder management skills, working across the global business and China teams to leverage knowledge and resources from this network to get things done
– Good knowledge of cloud computing, networking, OS and its security aspects
– Preferably with either CISSP, CISA, CRISC certification
– Excellent command of both spoken and written English and Mandarin Chinese to communicate with our Mandarin speaking stakeholders

About The Company

Our client is a world-renowned fintech company, a world-leading internet open platform with strong presence globally.

For more information, you may reach out to Jeslyn at his email at jeslyn.kan@peoplelake.asia.