Third Party Risk Management Analyst

Job Responsibilities:

• Communicate cybersecurity risks effectively to non-technical audiences.
• Update IT policies, standards, and procedures.
• Prioritize due diligence efforts based on the vendor's risk profile.
• Communicate technical information clearly in both Chinese and English.
• Prepare risk assessment reports and work with vendors to implement remediation measures.
• Collaborate with cross-functional teams, including Procurement, Supply Chain, R&D, Legal, and Privacy, toensure contractual security provisions address risks in vendor assessments.

Job Requirements:

• Collaborate with key stakeholders in the TPRM (Third Party Risk Management) program to ensure thorough due diligence aligns with global and regional compliance standards.
• Understand vendor cybersecurity programs and identify discrepancies with internal policies.
• Use technical expertise to evaluate vendor attestations (e.g., SOC1/SOC2, Vulnerability Scans, Penetration Testing, PCI DSS, ISO 27001) and spot control gaps or weaknesses.
• Have knowledge of Chinese privacy laws and cybersecurity regulations, such as the Personal Information Protection Law (PIPL), Data Security Law (DSL), Multi-Level Protection Scheme (MLPS) 2.0, and Cybersecurity Law of China (CSL).
• Familiarity with cybersecurity frameworks like NIST CSF, OWASP10, ISO, ITIL, and CMMI.

How to Apply:

To apply, please click "APPLY NOW" or email Sheryl Oon at Sheryl.Oon@ambition.com.my. Data provided is for recruitment purposes only *LI-IT

Due to the volume of applications received, we regret to inform you that only shortlisted candidates will be notified.

JTK Number: JTKSM 995 | Company Registration Number: 201301019088 (1048918-T)

If this job isn't quite right for you, but you know someone who would be great at this role, why not take advantage of our referral scheme? We offer MYR500 in shopping vouchers for every referred candidate who we place in a role. Terms & Conditions Apply. https://www.ambition.com.my/refer-a-friend