Senior Information Security Management Specialist - Remote in Malaysia
Nearshore CyberKuala Lumpur, Kuala Lumpur, Malaysia
Posted November 4, 2025
Full Time
About the Company
Nearshore Cyber is a global cybersecurity staffing and consulting firm that connects organizations with highly skilled security professionals across disciplines such as GRC, DFIR, CISOāasāaāService, MDR, SecOps, SIEM, and XDR. The company specializes in nearshore talent acquisition, offering flexible, costāeffective solutions for clients in the Americas, Latin America, and APAC. By combining deep industry expertise with a strong community network, Nearshore Cyber delivers tailored recruitment, training, and advisory services that help clients meet regulatory frameworks such as NIST CSF and ISO standards. Their unique blend of technical proficiency, regional focus, and collaborative culture positions them as a trusted partner for enterprises seeking to strengthen their cybersecurity posture while optimizing workforce efficiency.
Job Description
Our client, a global data center provider, is hiring a Senior Information Security Management Specialist to own and mature the Information Security Management System (ISMS) across multiple frameworks, including ISO 27001, NIST, PCI DSS, GDPR and NIS2.
Requirements
- 8ā10+ years of experience in information security or cybersecurity with a strong focus on governance, risk and ISMS management
- Demonstrated experience running or heavily contributing to an ISO 27001 ISMS (design, implementation, certification or surveillance audits)
- Advanced familiarity with: ISMS operations, audits and gap assessments, Risk registers, mitigation plans and risk reporting, Security awareness and cultural change programs, Proven ability to operate in complex multi-regulatory environments, ideally with exposure to NIST, PCI DSS, GDPR and NIS2
- Practical experience with vulnerability management tools and processes (governance and oversight, not just scanning)
- Comfortable using AI-enabled and automated tools (policy assistants, GRC platforms with AI features, analytics dashboards or security ācopilotsā)
- Strong communication skills and the ability to influence senior technical and non-technical stakeholders
- Experience leading or coordinating remote and distributed teams is preferred
