Search by job, company or skills

International Sos

Senior Executive, Internal Audit and Compliance

International Sos
Malaysia, Kuala Lumpur
3-7 Years
Save
  • Posted 5 months ago
  • Be among the first 10 applicants
Early Applicant

Job Description

About The Role

Executes internal compliance program in global scale as per the overall strategic information security plan of Aspire Lifestyles in accordance with customer requirements, certifications requirements, and cyber security requirements. A key element of this role is to work with internal stakeholders in business lines and support function.

Key Responsibilities

  • Serve as 2nd line of defense (2LOD), performing continuous assessment of IT security practices and policies to improve the security posture of the company
  • Conduct regular risk assessments to identify potential vulnerabilities in systems and processes and develop/implement strategies to mitigate identified risks.
  • Produce regular reporting on compliance evidence status.
  • Identify compliance gaps and plan the implementation of new controls.
  • Work closely with application and infrastructure architects and ensure the applications and infrastructure is designed and transitioned to operations based on various business and technology needs.
  • Work closely with information technology team to ensure that infrastructure is designed and built with required security controls. Advise on infrastructure security best practices such as server hardening, patch management, secure operating environment.
  • Educate employees by planning the webinars, emailers and group talks on audits and certifications to promote the culture of information security and compliance.
  • Plan, present and follow-up on compliance programs in all security forums such as security steering committee, data protection committee, information security management committee.
  • Collect and maintain applicable IT Security Regulations for all relevant geographies.
  • Provide expert opinion on information security policies to ensure that these are updated based upon the new security trends, customer needs, incident trend and legal or regulatory requirement.
  • Demonstrate expertise in managing third party security assessment across the organization.
  • Support the Manager of Audits, Certifications and Attestations in executing internal compliance program.

About You

  • Degree in business administration or a technology-related field required.
  • Professional security certifications such as CISA, CISSP, ISO/IEC 27001 Lead Auditor.
  • Experience with either PCI DSS, ISO 27001 or SOC2 certification required.
  • Minimum of 3 to 7 years of experience in a combination information security compliance and audits.
  • Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST.
  • Excellent written and verbal communication skills and high level of personal integrity
  • English (high proficiency in spoken & written)
  • Business Travel is required as per the business needs and priorities

Benefits

  • Highly engaged and empowered work culture
  • Continuous learning & development with excellent MNC and global exposure
  • Attractive Remuneration Package: Group Medical and Insurance Benefits, Lifestyles Flexi Benefits, Performance Bonus, etc.
  • Festive celebration and birthday token
  • Office location is accessible via public transport

More Info

Job Type:
Permanent Job
Industry:
Other
Function:
Information Security
Employment Type:
Full time

About Company

International Sos

Job ID: 138109467

Jobs by Skill - IT
Jobs by Skill - Non IT
International Jobs
Jobs in Top Cities
Popular Jobs
Last Updated: 23-05-2026 06:07:11 PM
Homejobs in MalaysiaSenior Executive, Internal Audit and Compliance

Similar Jobs

Senior Executive, Cybersecurity GRC

Setel
Malaysia, Kuala Lumpur

Skills:

control testing , compliance monitoring , Iso 27001, Risk Assessment, BNM RMiT, Cybersecurity governance, nist, Audit Coordination, Remediation tracking, PCI-DSS

Senior Executive, System & Network Management

tokio marine insurance group (asia)
Malaysia, Kuala Lumpur

Skills:

regulatory standards , Vmware Vsphere, Vulnerability Management, Microsoft Windows Server, PowerShell, Bash, Aruba, Cisco, Microsoft 365 services, Nutanix AHV, Linux environments, Entra ID, Active Directory, Arista, system hardening, asset management tools