Security Analyst (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Security Analyst (Cybersecurity): Supporting security governance, risk assessments, and compliance monitoring for a global data and technology platform with an accent on ISO 27001, SOC 2, and NIST frameworks. Focus on monitoring control effectiveness, tracking remediation of non-conformities, and supporting internal and external security audits.
Location: Hybrid in Cyberjaya (WFO 2 days a week)
Company
A global data and technology company powering opportunities for people and businesses across various markets including financial services, healthcare, and automotive.
What you will do
- Support security governance, assurance activities, and risk assessments for projects, platforms, and services.
- Assist with internal and external audits (ISO 27001, SOC 2, PCI DSS), including evidence collection and remediation tracking.
- Monitor security metrics and dashboards to identify non-compliance and control deviations against defined standards and SLAs.
- Log and track security non-conformities and collaborate with application owners to implement remediation actions.
- Prepare security reports and metrics summaries while collaborating with Risk Management and Technology teams.
Requirements
- 2-4 years of experience in information security, IT risk, compliance, or audit roles.
- Understanding of security and risk frameworks such as ISO 27001, SOC 2, or NIST.
- Familiarity with security metrics, control monitoring, and compliance reporting.
- Ability to analyze information and document findings effectively.
- Awareness of cloud, SaaS, or enterprise platforms.
Nice to have
- Experience in regulated or data-driven environments.
- Hands-on experience with security monitoring tools such as Panaseer, Checkmarx, or Wiz.io.
- Relevant certifications such as ISO 27001 Lead Implementor/Auditor, CCSK, CySA+, Security+, CISA, CRISC, or CISSP.
Culture & Benefits
- Inclusive, people-first, and purpose-driven culture recognized as one of the World's Best Workplaces 2025.
- Strong focus on DEI, authenticity, engagement, and work-life balance.
- Best-in-class family well-being and enhanced medical benefits.
- Comprehensive paid time off and professional development opportunities.
- Commitment to wellness, reward and recognition, and volunteering.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →