Info Security Engineer | Kuala Lumpur 612 views

RM8000-10000

Assisting Pine Labs in adapting to global Information security, data privacy standards & frameworks (e.g., ISO 27001, GDPR, Privacy shields, India- PDPA and local country Privacy Acts / Guidelines)
Information Security & Data privacy-based context setting, current state understanding, future state definition
Risk assessment & Risk treatment planning
Design & implementation guidance of related controls, policies, processes, org structures, metrics etc.
PDPA, draft plan for Personal Data Protection Act
The role supports the business’ security requirements and obligations mandated by standards and regulations such as the Payment Card Industry Data Security Standard (PCI DSS), ISO27001, NIST and SOC frameworks etc.
As a point of contact for internal and external auditors, the Information Security Risk and Compliance engineer monitors progress and enforces remediation of outstanding issues that may lead to noncompliance or unacceptable risks to the business.
Creating/managing procedural documents and evidence related to compliance and security.
Periodically conduct internal audits & reviews on controls & processes to identify gaps & strengthen controls.
Collaborate with internal information security, risk, Business, legal and other teams to identify & mitigate risks.
Publish periodic MIS, Risk Matrix, Reports

Minimum 5 year of Experience, Graduation Degree: preferably B.E/B.tech Information Technology or related fields.
Demonstrated practical experience implementing processes and control frameworks such as ISO 27001, PCI DSS, SOC 1 and ACT PDPA.
Practical experience implementing security controls to address requirements of Data privacy regulations, including GDPR, or other international regulations such as data localization & on-soil requirement
Experience testing of security controls, overseeing testing progress and developing test plans
Experience and familiarity with cloud data security and working with public cloud solutions (AWS, Azure, Cloud) Internal and/or external IT audit experience.
Practical experience communicating with various stakeholders effectively across the organization, especially technical teams, HR, Risk, Legal and OPS.
Experience documenting policies and procedures with good analytical skills.
Excellent verbal and written communication skills (in English)

Security Presales Solution Consultant | Kuala Lumpur