Technology & Security Risk and Controls Analyst

Dentsu Security are responsible for the scope and delivery of information security activities that cover all dentsu international offices located across 145 countries globally. Our Technology & Security Governance, Risk and Compliance team are responsible for an extensive programme covering technology & cyber security risk management, policies & controls, internal controls assurance and third-party security.

As a Technology & Security Risk and Controls Analyst, you will be part of our global Technology & Security Risk team and report to the Head of Technology & Security Risk. You will be supporting the governance and improvement of our technology and information security policies and controls framework. You will also support the management of technology and security risks.

Job Description:

Key responsibilities:

• Support the regular review and improvement of our technology and information security policies in collaboration with key stakeholders.

• Support the development and continuous improvement of our technology & information security control framework, ensuring appropriate controls are defined in line with regulatory and client requirements, and industry best practice.

• Raise awareness of our technology and information security policies, controls and standards with the relevant stakeholders globally.

• Partner with stakeholders across Technology, Security and other functions to identify, assess, monitor and respond to security risks, in line with the technology & security risk management framework and associated processes. 

• Update the risk register within our GRC platform, e.g. documenting agreed treatment plans, adding regular progress updates, and escalating delays or blockers. 

• Provide stakeholder reporting, briefings and status updates regarding policies, controls, standards.

What we’re looking for

• 2-3 years of experience in technology or information security risk management, policies and controls within a medium or large-sized organisation.

• Broad understanding of information security domains and controls.

• Experience in stakeholder management and strong communication skills.

• Knowledge and experience with industry and regulatory control frameworks such as ISO27001, NIST CSF, CSA, and PCI DSS

• Experience in creating briefings and presentations for stakeholders.

• Experience in using Microsoft Excel, PowerPoint, Forms.  

• A self-motivated, proactive, action-orientated approach to achieve deadlines.  

• A collaborative mindset, working alongside others to achieve common objectives.  

• Interest in personal development in the areas of governance, risk, compliance or security.  

Location:

Kuala Lumpur

Brand:

Global Technology

Time Type:

Full time

Contract Type:

Permanent