Governance Risk and Compliance (GRC) Analyst

Governance Risk and Compliance (GRC) Analyst

Hytech Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

Overview

We are seeking a Cyber Security Governance Specialist to strengthen our group company’s cyber-security frameworks and risk posture. In this role, you will collaborate with internal teams and guide stakeholders on key security standards and frameworks, including :

• ISO / IEC 27001
• NIST Cybersecurity Framework (CSF) & NIST SP 800 series
• PCI-DSS

Your work will ensure that governance, risk, and compliance (GRC) principles are embedded into business operations, enabling the company to maintain resilience, compliance, and trust.

Responsibilities

Conduct cyber-risk and control-maturity assessments (NIST CSF, ISO 27001, Essential Eight, proprietary models).

Own and maintain the GRC framework and policy stack; embed the three lines of defence.

Develop multi-year cyber-security and risk strategies aligned to corporate OKRs.

Mentor junior GRC analysts and upskill cross-functional teams on secure-by-design and offensive-security principles.

Qualifications & Experience

Preferred / Nice-to-Have

Seniority level

Employment type

Job function

Industries

#J-18808-Ljbffr