Security & Compliance Specialist

About the role

We hold ISO 27001, ISO 27017, ISO 27018 and SOC 2 Type II, and our customers — banks, statutory boards, large enterprises — expect us to prove it on every deal. This role is the CISO's right hand across both businesses.

What you'll do

• Governance, risk and compliance
• Run the ISMS and Scrut as the system of record: policies, risk register, Statement of Applicability, asset inventory, control mapping and evidence
• Coordinate ISO 27001/27017/27018 and SOC 2 Type II audits, internal audits, and corrective actions through to closure
• Run vendor and sub-processor risk, and track PDPA (Singapore and Malaysia), GDPR, MAS TRM and BNM RMiT obligations
• Respond to board and executive inquiries and prepare management review material, keeping the CISO briefed on posture, risks and audit readiness

What you need

• Compliance
• ISO 27001
• AWS
• Cloud security
• IAM
• OWASP

Good to have

• CI/CD
• Shell scripting
• CISA
• CISM
• Terraform
• Python