Security Analyst
Experian · Cyberjaya, MY
The posting
Security Governance, Assurance & Risk Support
Support security governance, compliance, and risk management activities.
Assist with security assessments, control reviews, and remediation tracking.
Support audits (ISO 27001, SOC 2, PCI DSS) and security control testing.
Security Metrics & Compliance Monitoring
Monitor security metrics, dashboards, and control performance indicators under the guidance of senior team members
Identify and record non‑compliance and control deviations against defined security standards, policies, and SLAs
Non‑Compliance Tracking & Remediation Support
Track security findings, control gaps, and non-compliance issues.
Partner with application and platform teams to drive remediation actions.
Monitor remediation progress and maintain risk records and dashboards.
Escalate overdue actions and high-risk issues in line with governance requirements.
Report & Stakeholder Support
The role offers exposure to a broad range of security governance, assurance, risk, and compliance activities while contributing to continuous improvement initiatives designed to strengthen security processes, reporting capabilities, and control effectiveness across the organization.
You will report directly to a Senior Manager and work within a collaborative team environment that values accountability, continuous learning, and professional development.
You will follow a hybrid working model , requiring 2 days in the office and 3 days working remotely each week .
Desirable Skills & Qualifications
This requirement necessitates 2+ years of experience in an information security, IT risk, compliance, or audit role (or relevant experience) on your part. You need to have understanding of security and risk frameworks such as ISO 27001, SOC 2, or NIST
Familiarity with security metrics, control monitoring, and compliance reporting
Analyse information and document findings
Awareness of cloud, SaaS, or enterprise platforms
Exposure to security audits, assurance, or compliance activities
Hands-on experience of security monitoring tools such as Panaseer, Checkmarx, Wiz.io
Security or risk‑related certifications e.g. ISO 27001 Lead Implementor/Auditor, CCSK, CySA+, Security+, CISA, CRISC, CISSP (or working towards)
Recruitment Fraud Awareness - Experian's recruitment process is conducted only through authorised channels. Recruitment communications will only be sent from an @ experian.com email address. Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process. To apply for roles or verify opportunities, please visit experian.com/careers
Benefits
Experian care for employee's work life balance, health, safety and wellbeing. In support of this endeavor, we offer best-in-class family well-being benefits, enhanced medical benefits and paid time off.
#LI-Hybrid
Experian Careers - Creating a better tomorrow together
Find out what its like to work for Experian by clicking here
Excerpt from the original listing. The full, current text lives at the source. Read and apply there →
The PivotHop read
- What a security engineer actually earnsmedian, seniority, by country
- Penetration Tester → Security Engineer63% readiness
- All open security engineer rolesthe full board
Backfilled listing, refreshed with the nightly scrape; the employer has not claimed it yet. Are you the employer? Claim this listing and it can be featured to the candidates whose skills already reach it, first month free.