IT Manager (GRC + Security Operations) Job at Randstad (Kuala Lumpur)

Security GRC Analyst

Juni is seeking a Security GRC (Governance, Risk, and Compliance) Analyst to pla...

Location

Sweden , Stockholm; Gothenburg

Salary:

Not provided

Juni

Expiration Date

Until further notice

Requirements

2 to 4 years of experience in information security governance, risk, or compliance roles
Demonstrated experience with compliance frameworks and regulations (e.g., PCI DSS, ISO 27001, GDPR, PSD2, EBA outsourcing and DORA)
Degree in Cybersecurity or Information Systems or similar
Knowledge of security frameworks (e.g., CIS Controls, NIST CSF)
Solid understanding of risk assessment methodologies and hands-on experience with risk registers and third-party risk management
Experience in coordinating activities for security certifications and audits
Ability to develop and track security metrics (KPIs)
Strong analytical, problem-solving, and organisational skills
Excellent communication skills, comfortable presenting to various stakeholders
A proactive and independent worker who is also a strong team player

Job Responsibility

Maintain and update core security documentation, including policies, procedures, and instructions, ensuring they remain current and relevant
Identify, collect, and analyse data to track key security performance indicators (KPIs) and metrics, generating reports and dashboards to communicate security performance to stakeholders
Maintain the risk register and support daily risk management activities with growing independence
Follow up on the remediation of risks identified in new projects, third-party engagements, and other business initiatives
Conduct thorough security posture assessments of new vendors and perform periodic reviews of existing ones
Support our 3rd party procurement process
Monitor the implementation and effectiveness of security controls across the organisation
Coordinate and support activities to maintain key security certifications, including PCI-DSS and ISO 27001
Coordinate and support the implementation of remediation plans to address identified compliance gaps
Provide support in responding to security-related questions during partner due diligence and assist in providing necessary information for cyber insurance renewals

What we offer

Work hybrid
Meet all Junis IRL at the company onsite each year
Diversity is at our core
Progress your career whether you choose to manage people or not
Stock options
Vacation 30 days
Private Health insurance
Beautiful offices in central Gothenburg and Stockholm, front row sea view

Fulltime

Security GRC Engineer

The Security GRC Engineer at Atlassian will be instrumental in implementing and ...

Location

India , Bengaluru

Salary:

Not provided

Atlassian

Expiration Date

Until further notice

Requirements

2+ years experience in a similar role, preferably in a large-scale SaaS/Product environment
Expertise and experience working in security-focused roles
Experience with application security, especially web applications
Experience in cloud security architecture and infrastructure
Experience providing SME knowledge and guidance to stakeholders and engineering functions
Experience working with internal/external audit and leadership teams
Solid knowledge of cybersecurity principles, risk management strategies, and IT governance frameworks
Strong communication and interpersonal skills, with the ability to interact with stakeholders at all levels and explain complex security concepts in an understandable way
Relevant certifications such as CISSP, CISM, or CRISC would be beneficial
Scripting experience to automate recurring tasks (JQL, SQL, Python, Go)

Job Responsibility

Develop and implement security risk and governance capabilities, policies, and operations, ensuring alignment with Atlassian's business objectives and compliance with relevant laws and regulations
Provide technical guidance, promote automation, review designs, and support security teams to equip engineering partner teams with the latest tools, techniques, and methodologies to build secure products by default
Security GRC data management, analysis and reporting
Identify potential security risks and threats, and develop strategies to mitigate them
Understand Atlassian’s security controls and how they mitigate our risks
Support other teams in implementing and maintaining security controls and best practices
Periodically evaluate and report on the effectiveness of Atlassian’s security posture
Stay informed on the latest developments in cybersecurity and risk management to ensure that Atlassian's security controls are always at the cutting edge

What we offer

health coverage
paid volunteer days
wellness resources

Fulltime

Security Strategy and Risk Management Head of Department

The Security Strategy and Risk Management Head of Department is a senior leaders...

Location

United States , Irvine

Salary:

181240.00 - 259160.00 USD / Year

Hyundai AutoEver America

Expiration Date

Until further notice

Requirements

15–20 years of progressive experience across Information Security, GRC/Risk Management, customer/vendor security management and/or strategic operations
Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business Administration or a related discipline
Excellent stakeholder management, communication, and leadership skills
Demonstrated experience working across multi-disciplinary teams to achieve common objectives
Proficient in English for effective communication and coordination

Job Responsibility

Lead enterprise-wide risk assessment, risk issue management, and risk exception management
Maintain and enhance risk management frameworks aligned with industry best practices
Deliver insightful, data-driven risk reporting to senior leadership
Oversee the Information Security compliance and control assurance program
Lead coordination of internal and external audits, assessments, and certification processes
Lead the Third-Party Risk Management (TPRM) program
Oversee creation, governance, maintenance, and communication of Information Security policies, standards, and procedures
Direct the Information Security Training and Awareness program
Partner with the CISO to define and maintain the Information Security strategic roadmap
Lead budget planning, forecasting, tracking, and optimization for the full Information Security organization

Fulltime

Security GRC Analyst

Plan, perform and control the activities to assure Blockchain.com’s controls are...

Location

Argentina , Buenos Aires

Salary:

Not provided

Blockchain

Expiration Date

Until further notice

Requirements

Forward-looking and strategic minded, with an eye to understanding potential risks, legal and compliance implications
Good knowledge of IT risk areas including regulatory, operational, information and energy industry specific
Good overall knowledge of application and infrastructure security control mechanisms
Advanced command of the English language
2+ years experience in audit and security certifications such as ISO, SOC and PCI
Education Four-year college degree (or equivalent)

Job Responsibility

Oversee execution and completion of applications related security controls ensuring effectiveness
Design, create and share policies, standards and procedures to ensure demonstrable regulatory /legal control. Communicate changes to internal stakeholders
Conduct preliminary self-assessment control tests of the applicable controls
Track and document remediation actions as result of audit findings
Host internal/external IT audits including walkthroughs, retaining test evidence for in scope assets and tracking action plans to either remediate or mitigate potential risk exposure findings
Conduct the quarterly User Access reviews process including information gathering, management responses tracking, and results review to follow through on corrective actions
Develop, implement and maintain a risk register. Contribute results to the corporate dashboard
Participate in new tools/partners/investors due diligences
Have an active participation in Digital projects and perform other activities assigned by the Manager

What we offer

Amazing and accessible office location in Palermo
Apple equipment
Full-time salary based on experience and meaningful equity in an industry-leading company
The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field
Flexible work culture
Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year

Fulltime

Information Security Officer

The Information Security Officer is a senior leadership role responsible for ove...

Location

Portugal , Lisbon; Oporto; Madrid; Barcelona

Salary:

Not provided

TUI

Expiration Date

Until further notice

Requirements

Experienced authentic leader with a good understanding of technology and managing Information Security risks in the enterprise
Passionate about Information Security, delivering business value and driving continuous improvement
Strong people leadership skills and experience in building a positive enabling security culture based on trust, quality and pragmatic risk management
Great communicator and influencer comfortable working across hierarchical, organisational, cultural and market boundaries
Experience of managing teams, mentoring and developing security talent from different cultural backgrounds
Professionally qualified holding a recognised security accreditation (CISSP/CISM/CISA etc.,) or equivalent experience with demonstrable Continuous Professional Development
Maintain a good understanding of latest security threats and the mitigating strategies
Ability to provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards
Experience of the implementation, operation and maintenance of an Information Security Management framework such as ISO27001 or NIST CSF
Good understanding of integrating security into software or product development lifecycle and cloud security

Job Responsibility

Promote and inspire a security first culture at TUI
Direct the development, implementation, delivery and support of an enterprise Information Security strategy aligned to the strategic requirements of the business
Lead the provision of Information Security resources expertise, guidance and systems necessary to execute strategic and operational plans across all of the organisation’s information systems
Ensure that each Domain is motivated and empowered to deliver the prioritised roadmap
Protect the TUI brand and its customers, detect and respond to incidents, strengthen defences, reduce the attack surface and secure behaviours
Drive adoption of and adherence to security policies, standards and controls through the provision of expert advice and guidance
Protect our most critical assets and ensure appropriate assurance and rigorous testing is in place
Ensure security incidents are managed effectively through engagement with the security operations team, and that lessons learned and audit findings are remediated
Ensure effective security operations (e.g. vulnerability scanning, patching)
Protect the integrity, availability, authenticity, non-repudiation and confidentiality of information and data in storage and in transit

What we offer

Attractive remuneration, bonus opportunity, exclusive travel perks & discounts, extensive health & wellbeing support
Flexible working: hybrid or remote working models
Opportunities to upskill, reskill and grow your career
Access the TUI Tech Learning Hub to level-up and reach your ambitions
Participate in our tech communities and collaborate on global projects and teams
Get involved with incredible local charity and sustainability initiatives like the TUI Care Foundation and the Sustainable Tech Community

Fulltime

Digital Resilience and IT Risk Manager

Our COO Functional Risk Management team embedded in the Digital Resilience Area ...

Location

Spain , Barcelona

Salary:

Not provided

Allianz

Expiration Date

Until further notice

Requirements

Experience in using GRC tools and reporting tools (e.g., PowerBI)
A solid track record of achievement and continues development (can be any academic, professional, and/or sport)
Strong understanding of risk management frameworks and methodologies
Data-driven mindset with experience in data analysis and interpretation
excellent analytical and problem-solving skills
An organized and methodological approach with strong interpersonal skills
Possess a strong sense of curiosity and the ability to think creatively and innovatively
4+ years of experience in Operational, IT, or Information Security (IS) Risk Management, Management Consulting, IT Governance, or a related field
Bachelor’s degree or higher in Information Technology, Engineering, Economics, Risk Management, Business Administration, or any related field

Job Responsibility

Support, coordinate and oversee information Risk Management Lifecycle activities performed by the 1st LoD
Actively contributes to identifying improvements and assist in adapting the Risk Management frameworks to address our rapidly evolving risk landscape
Coordinate thorough risk assessments to identify, evaluate and mitigate information risks across the organization
Ensure adherence to relevant regulatory requirements and internal policies related to information risk management as well as preparing detailed reports and presentations on risk findings, trends and recommendations for senior management and stakeholders
Utilize data analytics to support risk assessments, decision-making processes and to drive insights that enhance risk management strategies
Work closely with various business units, IT, IS, Risk and compliance teams to ensure alignment and integration of risk management practices
Utilize new technologies and feature within our organizational setup to enhance, scale, and optimize existing risk management processes
Develop and deliver training programs to enhance awareness and understanding of information risk management across the organization
Foster a risk-driven culture and advocate for the benefits of risk management whilst engaging with leadership and functional leads to ensure alignment and support

What we offer

We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad
We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)
From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered
Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach

Fulltime

Information Security Officer

Elevate Our Security Posture: Join Us as an Information Security Officer. Are yo...

Location

Poland , Łódź

Salary:

Not provided

Arrive

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field
5+ years of experience in an information security role, with at least 2 years in a leadership position
Relevant certifications (CRISC, CISSP, CISA, CISM) are preferred
Strategic Mindset: Deep understanding of business goals and objectives, with the ability to align cybersecurity risk management with overall business strategy
Risk Management Expertise: Proven ability to identify, assess, and prioritize cybersecurity risks
Technical Proficiency: In-depth knowledge of cybersecurity principles, security controls, incident response, and industry frameworks
Communication & Collaboration: Excellent communication skills, with the ability to translate complex technical concepts for non-technical audiences
Leadership: Proven ability to lead and mentor a team of security professionals
Thrive in a Fast-Paced Environment: Experience contributing to and managing cybersecurity within a high-growth company

Job Responsibility

Risk Management: Proactively identify, assess, and mitigate security risks and vulnerabilities
Security Awareness: Develop and deliver engaging training programs to educate employees on security best practices
Compliance: Ensure adherence to relevant security standards and regulations (ISO 27001, PCI DSS, GDPR)
Policy & Procedure Development: Lead the creation and maintenance of clear and concise security policies and procedures
Third-Party Risk Management: Assess and manage the security posture of third-party vendors and partners
Data Protection: Define requirements and contribute to implementing Data Loss Prevention (DLP) solutions
Security Frameworks: Contribute to the adoption and implementation of industry-leading security frameworks (NIST, CIS)
Business Partnership: Collaborate closely with business units to understand their security needs and align with the overall security strategy
GRC Program: Operate and mature our Governance, Risk, and Compliance (GRC) program
Leadership & Collaboration: Lead and mentor a team of security professionals, fostering a culture of collaboration and continuous improvement

Risk Analyst

The Risk Analyst role at NTT DATA involves assessing and managing risks to ensur...

Location

India , Hyderabad

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

3 - 6 years of experience
Experience in Cyber Governance, Risk & Compliance (GRC) and Security Operations (SecOps) Management
Deep understanding of GRC frameworks and SecOps activities
Exposure to working in a Managed Services environment
Solid understanding and experience of Cyber Security controls in terms of people, process and technology
Proven experience with Cyber control metrics management
Exceptional communication and written skills
Technical and non-technical stake holder engagement
Understanding of Cyber governance, Risk management, compliance frameworks such as NIST, ISO 27001, ISO 27035, SOC2
Strong and demonstrated experience in Information Security, with a focus on Cyber GRC and SecOps

Job Responsibility

Assessing and managing risks to ensure the security, integrity, and resilience of the organization's operations and services
Identifying potential threats, analyzing vulnerabilities, and providing recommendations to mitigate risks
Proactive risk assessment and collaboration with cross-functional teams
Audit Management: Against security standards such as ISO 27001, SOC2 Type II and Client contract obligations
BCP/DR testing
Client Cyber Risk management
Contribution to Cyber security awareness training
Metrics Management: Assist stakeholders with security metrics reporting
Security Incident Response
Supply Chain Risk and Audit management

Fulltime

IT Manager (GRC + Security Operations)

Randstad

Location:
Malaysia , Kuala Lumpur

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
March 23, 2026

Expiration:
April 24, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for IT Manager (GRC + Security Operations)

Security GRC Analyst

Security GRC Engineer

Security Strategy and Risk Management Head of Department

Security GRC Analyst

Information Security Officer

Digital Resilience and IT Risk Manager

Information Security Officer

Risk Analyst

IT Manager (GRC + Security Operations)

Randstad

Location:Malaysia , Kuala Lumpur

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:March 23, 2026

Expiration:April 24, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for IT Manager (GRC + Security Operations)

Security GRC Analyst

Security GRC Engineer

Security Strategy and Risk Management Head of Department

Security GRC Analyst

Information Security Officer

Digital Resilience and IT Risk Manager

Information Security Officer

Risk Analyst

Location:
Malaysia , Kuala Lumpur

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
March 23, 2026

Expiration:
April 24, 2026