IT Risk Analyst ( Information Security / GRC )

at  Randstad

• Be part of a company that invest heavily in security (>10 headcounts)
• High job stability with a multi-billion company
  About the company
  Our Client is a market leader within their industry. They have a well-established presence of more than 30 years with a global footprint of more than 10 countries. With rapid expansion plan, they are now looking for a new Senior Information Security Analyst (GRC, ISO27001, GDPR, PDPA) to join their team.
  About the job

You will be responsible for:

• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.
• Overseeing the development and execution of corporate security awareness and training programs to business stakeholders to prevent and limit the impact of a potential cybersecurity event
• Monitoring compliance, keep abreast of legislative and regulatory trends to address potential impact and non-compliance/gaps.
• Leading information security / GRC projects

Skills and experience required
As a successful applicant, you will have at least 5 years of experience in Security Goverannce, Risk & Compliance / Information Security(ISO 27001, GDPR, PDPA or etc). Proven track record of engagement with C-level business stakeholder across Asia is required.
Candidates with cloud compliance will be of added advantage.
Whats on offer
This is an excellent opportunity to join an established company with support from business stakeholders to improve the security posture of the company.
To apply online please use the ‘apply’ function, alternatively you can reach me at https://www.linkedin.com/in/hoonteck-nologyrecruitment. (EA: 94C3609/ R1219669

• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.
• Overseeing the development and execution of corporate security awareness and training programs to business stakeholders to prevent and limit the impact of a potential cybersecurity event
• Monitoring compliance, keep abreast of legislative and regulatory trends to address potential impact and non-compliance/gaps.
• Leading information security / GRC project