Kerja Sepenuh Masa, EXECUTIVE - IT (CYBERSECURITY - TECHNOLOGY GOVERNANCE - RESILIENCE) (EG07) di HARTALEGA Selangor - Maukerja

Job Description

Job Purpose

Execute cybersecurity governance and compliance initiatives by managing policy implementation, risk documentation, and audit coordination.

Deliver comprehensive regulatory support to guarantee organizational adherence to established cybersecurity frameworks and industry standards.

Responsibilities

1. Author and maintain cybersecurity policies, standards, and procedures to align with internal security requirements and governance frameworks.

2. Audit compliance adherence by monitoring cybersecurity controls against regulatory and internal organizational requirements.

3. Quantify risk data and perform analytical reviews to track cybersecurity assessments, audit findings, and mitigation progress.

4. Catalog cybersecurity governance documentation, including frameworks, guidelines, audit records, and formal regulatory submissions.

5. Orchestrate audit preparation by compiling evidence, reviewing technical documentation, and tracking follow-up remediation actions.

6. Administer cybersecurity awareness programs by managing training records, participation metrics, and official governance communications.

7. Disseminate internal governance initiatives and policy updates to ensure organizational awareness of compliance requirements.

8. Identify and report compliance gaps by monitoring the implementation status of mandatory cybersecurity control requirements.

9. Produce structured governance reports and compliance summaries for executive review and senior management oversight.

10. Execute specialized governance tasks and tactical compliance assignments as directed by the reporting manager.

Qualification and Experience

1. Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or a related field.

2. Fresh graduate or minimum 1 year of experience in IT/cybersecurity, with preferred exposure to audit processes or policy management.

3. Solid understanding of core cybersecurity principles, specifically the Confidentiality, Integrity, and Availability (CIA) triad.

4. Knowledge of IT audit and compliance concepts, including awareness of governance frameworks such as ISO 27001 or NIST.

5. Proficiency in Microsoft Office (Excel, Word, PowerPoint) for developing and maintaining structured documentation and technical reports.