Responsibilities
- Lead and assist in conducting audits, evaluations, and assurance initiatives focused on information security and Digital Trust frameworks, particularly ISO/IEC 27001 and associated standards.
- Assist in securing, retaining, or growing accreditation, certification, or licensing eligibility for Digital Trust services in Malaysia.
- Evaluate technical proposals, audit parameters, certification assumptions, effort estimates, auditor qualifications, and commercial viability for new or extended Digital Trust offerings.
- Support client interactions and solution development by delivering expert technical insights during meetings, pre-sales discussions, proposal reviews, and service demonstrations.
- Create and update service methods, audit checklists, technical guidelines, client materials, and internal knowledge assets for Digital Trust service execution.
- Contribute technical expertise to expand services in domains such as information security, data privacy, AI governance, industrial cybersecurity, business continuity, SOC 2, PCI DSS, and TISAX.
- Work with regional and global technical teams to ensure uniform service quality, auditor proficiency, technical review accuracy, and high customer satisfaction.
- Plan, execute, or assist in audits and assessments for ISO/IEC 27001 and related Digital Trust programs, following applicable certification and accreditation rules.
- Support the development and readiness of services for ISO/IEC 27701, ISO/IEC 42001, IEC 62443, and ISO 22301 standards.
- Deliver technical advisory services for Digital Trust assurance, including SOC 2, cybersecurity governance, privacy audits, data protection, business continuity, PCI DSS, TISAX, and independent assurance.
- Support the creation of AI governance services, including certification of AI management systems, AI cybersecurity, risk assessments, dataset quality checks, bias and robustness testing, and responsible AI validation.
- Analyze customer requirements, audit scope, system boundaries, controls, risks, regulatory obligations, and evidence needs to determine appropriate audit strategies and outputs.
- Develop and assess audit plans, reports, nonconformity statements, technical recommendations, certification inputs, and client-facing documentation.
- Strengthen internal capabilities by training and mentoring teams on Digital Trust frameworks, audit practices, technical standards, customer expectations, and service differentiation.
- Provide insights on market trends and competitor activities from providers like BSI, LRQA, TÜV SÜD Malaysia, DNV, and Bureau Veritas to help position services effectively.
- Uphold impartiality, confidentiality, technical accuracy, and proper document control across all audit, assessment, commercial, and client-related activities.
- Ensure compliance with organizational integrity policies, accreditation criteria, relevant standards, information security protocols, and professional conduct expectations.
- Follow Health, Safety, and Environment (HSE) policies by demonstrating safe behaviors and adhering to required processes during all duties.
- Carry out additional duties as directed by the reporting manager or Senior Management.
Work Arrangement
On-site
Other
Willing and able to travel up to 75% of the time for audits, client meetings, technical discussions, training, assessments, and business development activities.
