Senior Information Security Compliance Analyst - KUA00QE
Company: Worley
Primary Location: MYS-KL-Kuala Lumpur
Job: Cyber Security
Schedule: Full-time
Employment Type: Employee
Job Level: Experienced
Job Posting: Aug 12, 2024
Unposting Date: Sep 11, 2024
Reporting Manager Title: Manager, Cyber Security Compliance
:
About the job
Were looking for a Senior Information Security Compliance Analyst to join our Kuala Lumpur team.
When you work for us, you get the chance to join nearly 50,000 people all driven by a common purpose of delivering a more sustainable world. Were excited about the challenges ahead. We believe theres never been a more rewarding time to work in the energy, chemical and resources sectors.
We offer a flexible approach to working, because our people are safer, healthier, and more productive when they can balance work with life. Thats why there are flexible and hybrid working options, so you can choose when, where and how you work.
As a Senior Information Security Compliance Analyst, you will be working with various stakeholders across the business on information security compliance audits and other compliance activities to continuously improve Worleys information security practices.
Who we are
Worley is a global professional services company of energy, chemicals and resources experts headquartered in Australia.
Right now, were bridging two worlds as we accelerate to more sustainable energy sources, while helping our customers provide the energy, chemicals and resources that society needs now.
We partner with our customers to deliver projects and create value over the life of their portfolio of assets. We solve complex problems by finding integrated data-centric solutions from the first stages of consulting and engineering to installation and commissioning, to the last stages of decommissioning and remediation. Join us and help drive innovation and sustainability in our projects.
What youll do
Were looking for a Senior Information Security Compliance Analyst to join our Kuala Lumpur team.
The role responsibilities include:
Support Worley Digital to comply with information security regulations and customer contractual requirements.
2nd Line of Defence in IIA Three Lines of Defence Model.
Conduct internal controls assessment of Information Security against policies and standards, using Agile auditing methodology.
Identify and effectively communicate risks, control gaps, and deficiencies.
Develop practical recommendations and obtain buy-in from control owners.
Respond to information security assessment requests from Worley customers.
What youll have
A relevant bachelors degree.
Certifications such as CIA, CISA, CRISC, CISSP preferred.
5 - 10 years of experience performing IT or financial audits, preferably IS assurance with a professional services firm.
Demonstrated ability to partner and collaborate effectively with stakeholders, demonstrating an appreciation of both IT and business strategy.
Advanced awareness of full technology stack.
Demonstrated ability to identify material information security control weaknesses and recommend pragmatic remediation action plans, while managing potentially contentious situations.
Exceptional attention to detail, with the aptitude to collect, analyze and conclude on data.
Demonstrated ability to produce clear, concise, and logical audit working papers.
Operational knowledge of data handling and confidentiality.
Ability to work in a fast-paced unstructured customer-centric environment across multiple geographies and operational contexts.
Knowledge of frameworks including ITIL, COBIT, NIST CSF (Cyber Security Framework), Essential 8 and ISO
Advanced user in MS Office applications (including MS Visio) and MS SharePoint.
Advanced awareness of full technology stack.
This is a global role and will require flexibility to work across multiple time zones.
Builds appropriate, constructive, and effective business relationships throughout the organization; uses diplomacy and tact; is approachable; communicates clearly, accurately, and consistently both verbally and in written matters. Employs the principles of active listening and encourages feedback from others.
Enjoys working in a small high caliber team with high visibility to senior stakeholders. Able to work and liaise with multiple teams and stakeholders, able to prioritize workloads and help other team members to achieve team goals.
Why you should apply
Leading global provider of professional project & asset services in energy, chemicals & resources.
We deliver the worlds most complex projects.
Join a high-performing team.
Join a fun and inclusive, global team of professionals.
Opportunities to progress beyond this role.
Moving forward together
We want our people to be energized and empowered to drive sustainable impact. So, our focus is on a values-inspired culture that unlocks brilliance through belonging, connection and innovation.
Were building a diverse, inclusive and respectful workplace. Creating a space where everyone feels they belong, can be themselves, and are heard.
And we're not just talking about it; we're doing it. We're reskilling our people, leveraging transferable skills, and supporting the transition of our workforce to become experts in today's low carbon energy infrastructure and technology.
Whatever your ambition, theres a path for you here. And theres no barrier to your potential career success. Join us to broaden your horizons, explore diverse opportunities, and be part of delivering sustainable change.
Ready to join us Apply now to submit your CV