Governance, Risk & Compliance (GRC) Analyst (Cybersecurity)

Location: Onsite in Johor Bahru or Penang, Malaysia.

Company

hirify.global provides precision robotics, integrated automation systems, and contamination control solutions for semiconductor and laboratory automation industries worldwide.

What you will do

• Support and maintain the ISO 27001 Information Security Management System, including policies, standards, procedures, control ownership, evidence repositories, and audit readiness documentation.
• Coordinate internal, external, surveillance, and certification audits, track remediation activities, and manage corrective action plans.
• Facilitate cybersecurity risk assessments, maintain risk registers, support mitigation and exception tracking, and prepare risk dashboards and management reports.
• Respond to customer security questionnaires, support supplier and third-party security reviews, and partner with Legal and business stakeholders on contractual security requirements.
• Coordinate security awareness training and phishing simulations, track participation and compliance metrics, and develop awareness communications.
• Support incident governance, Security Council activities, management reviews, executive reporting, and continuous improvement across the security program.

Requirements

• 5–7 years of experience in Governance, Risk & Compliance, Information Security, Internal Audit, IT Audit, Risk Management, or a related discipline.
• Working knowledge of information security principles and controls, with experience supporting compliance initiatives or audits.
• Strong written communication and documentation skills, and the ability to communicate effectively with technical and non-technical stakeholders.
• Strong organizational skills and attention to detail.
• Ability to manage multiple projects and deadlines simultaneously.

Nice to have

• Experience with ISO 27001, SOC, SOX, or regulatory audits.
• Experience with customer security questionnaires and third-party risk management.
• Knowledge of NIST Cybersecurity Framework, NIST 800-171, GDPR, or the Cyber Resilience Act.
• Security certifications such as Security+, ISO 27001 Internal Auditor, ISO 27001 Lead Auditor, CRISC, CISA, or CISSP Associate or Full.

Culture & Benefits

• Onsite work in Johor Bahru or Penang, with flexibility in work arrangements depending on role and business needs.
• Collaboration with stakeholders across IT, Engineering, Product, Legal, HR, Operations, and Quality.
• Inclusive and equal-opportunity workplace committed to diversity.
• Work directly with the CISO and contribute to improving security outcomes, customer trust, and regulatory readiness.