Information Security Risk Governance Specialist II

7 days ago

Penang, Malaysia Jabil Circuit Full time

JOB SUMMARY
The Information Security Supply Chain Risk Specialist supports Global Information Security's initiatives from a Supply Chain Risk Management perspective. Facilitates risk assessments on Jabil's supply chain to classify threats to Jabil's infrastructure and organizational operations, while identifying and recommending appropriate risk mitigations. Provides subject matter expertise on Jabil's information security supplier requirements.

ESSENTIAL DUTIES AND RESPONSIBILITIES

  1. Lead Information Security's Vendor Review process.

  2. Evaluate, comprehend, and communicate compliance evidence documentation such as SOC report(s) and/or ISO 27001k certificates.

  3. Communicate risk assessment findings to internal solution service owners and external third-party vendors/suppliers.

  4. Provide consultative advice to internal solution service owners that enables them to make informed risk management decisions.

  5. Identify appropriate controls to effectively manage information risks, as needed.

  6. Identify opportunities to improve risk posture and assessing the residual risk.

  7. Review and provide feedback on technology third-party contractual agreements.

  8. Maintain strong working relationships with individuals and groups involved in managing information risks across the organization.

  9. Connect the dots between Jabil's supply chain and current risks posed to the IT environment.

  10. Recommend changes to procedures and standards to ensure compliance while minimizing the impact on business processes.

  11. Serve as a focal point for escalation and solution of Information Security SCM risk issues.

  12. Participate and collaborate in enterprise-wide supply chain risk initiatives.

  13. Maintain positive relations with all employees and seek suggestions/ways of improving compliance of IT processes and systems.

  14. Drive process, procedure and systems continuous improvement, identify creative ways to reduce costs by streamlining them, assure they are efficient and not redundant.

  15. Participate in/drive project and ensure timely project delivery. Organize own work effectively and efficiently.

  16. Maintain discretion and confidentiality in all areas pertaining to data and proprietary information whether internal to Jabil or customer-specific.

  17. Participate in the exchange of ideas within the department. Ask questions and encourage input from other team members.

  18. Understand and embrace the business and IT strategic direction.

  19. Provide regular updates to appropriate managers and conference with them on complex or unusual situations.

  20. Demonstrate commitment to customer service: anticipate, meet and exceed customer expectations, solve customer problems quickly and effectively, make customer issues a priority.

  21. Exchange knowledge and information with other Jabil facilities to ensure best practices are shared throughout the Jabil organization.

  22. Ensure 100% adherence to all company, IT and department policy, processes and procedures.

  23. Comply and follow all procedures within the company security policy.

  24. May perform other duties and responsibilities as assigned.

JOB QUALIFICATIONS
KNOWLEDGE REQUIREMENTS

  1. Customer service skills as well as effective communication skills – both verbal and written.

  2. Ability to follow written and verbal directions.

  3. Very good presentation skills.

  4. Meticulous attention to details.

  5. Strong organization and planning skills.

  6. Ability to work effectively under pressure with constantly changing priorities and deadlines.

  7. Ability to coordinate work from multiple resources, including remote ones.

  8. Self-starter and the ability to work with minimal supervision.

  9. Knowledge of Information Security frameworks such as ISO27001 and NIST.

  10. Proficiency in use of personal computers, Microsoft Office products (Excel, Word and PowerPoint) and e-mail skills required.

EDUCATION & EXPERIENCE REQUIREMENTS

  1. Bachelor's Degree required.

  2. Degree in Computer Science or related discipline.

  3. 3-5 years experience required in a compliance or audit environment, preferably facilitating Information Technology compliance and/or audit activities.

  4. CISA Certification (Certified Information Systems Auditor) – or equivalent.

  5. Experience in interpreting compliance requirements and generating supporting documentation for such activities is preferred.

  6. Or an equivalent combination of education, training or experience.

WORKING CONDITIONS

  1. Regular business hours. Some additional hours may be required.

  2. Travel requirements: Domestic and/or International, up to 10%.

  3. Climate controlled office environment during normal business hours.

#J-18808-Ljbffr

  • Cybersecurity Risk Management Professional II

    1 week ago

    Penang, Malaysia Jabil Circuit Full time

    About the PositionWe are seeking an experienced Information Security Risk Governance Specialist II to support our Global Information Security team. As a key member of the team, you will facilitate risk assessments on Jabil's supply chain to classify threats to Jabil's infrastructure and organizational operations, while identifying and recommending...

  • Supply Chain Information Security Expert

    1 week ago

    Penang, Malaysia Jabil Circuit Full time

    Job SummaryThe Information Security Risk Governance Specialist II supports Global Information Security's initiatives from a Supply Chain Risk Management perspective. This role involves facilitating risk assessments on Jabil's supply chain to classify threats to Jabil's infrastructure and organizational operations, while identifying and recommending...

  • Information Security Governance Specialist Lead

    1 week ago

    Penang, Malaysia Jabil Circuit Full time

    About the RoleThis position supports Global Information Security's initiatives from a Supply Chain Risk Management perspective. It involves facilitating risk assessments on Jabil's supply chain to classify threats to Jabil's infrastructure and organizational operations, while identifying and recommending appropriate risk mitigations.As a key member of the...

  • Security Risk Governance Consultant

    1 week ago

    Penang, Malaysia Jabil Circuit Full time

    About the JobThis position requires a strong understanding of information security frameworks such as ISO27001 and NIST. The ideal candidate will have excellent communication skills and be able to work effectively under pressure with constantly changing priorities and deadlines.Main ResponsibilitiesFacilitate Vendor Review process for Information...

  • Specialist, Information Security

    3 weeks ago

    Penang, Malaysia Celestica Inc. Full time

    Specialist, Information SecurityDate: Mar 4, 2025Location: Penang, 07, MYFunctional Area: ITM - Information TechnologyCareer Stream: ITR - IT Risk & ComplianceRole: AssociateJob Title: Information Security SpecialistJob Code: SPE-ITM-SECRJob Level: Band 8Direct/Indirect Indicator: IndirectSummaryDetailed DescriptionPerforms tasks such as, but not limited to,...

  • Procurement Specialist II

    1 week ago

    Penang, Malaysia Boston Scientific Gruppe Full time

    Job Description:We are looking for a highly skilled Indirect Sourcing Specialist II to join our team at Boston Scientific Gruppe. As a key member of our procurement team, you will be responsible for developing and implementing strategic sourcing initiatives that drive value and efficiency.About Our Company:Boston Scientific is a global medical technology...

  • Associate – Governance, Risk

    2 weeks ago

    Penang, Malaysia ACCA Careers Full time

    DescriptionsKPMG, a place where bold, new ideas are welcome and dedication is rewarded, is made up of outstanding people with a broad range of interests, talents and motivations.We invite you to join our team in Penang and to experience the KPMG difference as we continue to be The Clear Choice to our clients from every sector of business and industry...

  • Security Specialist

    4 weeks ago

    Penang, Malaysia Flex Full time

    At Flex, we welcome people of all backgrounds. Our employees thrive here by living our values: we support each other as we strive to find a better way, we move fast with discipline and purpose, and we do the right thing always. Through a respectful, inclusive and collaborative culture, a career at Flex offers the opportunity to make a difference, invest in...

  • Security Specialist

    2 days ago

    Penang, Malaysia Flex Full time

    At Flex, we welcome people of all backgrounds. Our employees thrive here by living our values: we support each other as we strive to find a better way, we move fast with discipline and purpose, and we do the right thing always. Through a respectful, inclusive and collaborative culture, a career at Flex offers the opportunity to make a difference, invest in...

  • Project Governance Specialist

    2 days ago

    Penang, Malaysia Celestica Inc. Full time

    About the RoleCelestica Inc. is looking for a Project Governance Specialist to join our team and contribute to the success of our projects.Main Responsibilities:Establish program governance controls, ensuring effective risk management and issue resolution.Manage program budget, forecasting actuals against plan/quote for income/revenue, cost/labour &...

  • Information Security Professional

    4 days ago

    Penang, Malaysia Celestica Inc. Full time

    Job DescriptionThe successful candidate will possess a Bachelor's Degree or equivalent combination of education and experience in a related field. They will have at least 4 to 6 years of relevant experience in IT, with a strong focus on cybersecurity.Key responsibilities include administratively configuring and managing key security solutions, providing 3rd...

  • Corporate Governance Specialist

    5 days ago

    Penang, Malaysia Andaman Medical Full time

    Job DescriptionThe Corporate Governance Specialist will oversee the company's legal operations and corporate affairs, ensuring compliance with regulatory requirements.Responsibilities include assessing and mitigating legal risks, handling legal documentation, managing corporate secretarial duties, and offering insights and recommendations to guide business...

  • Global Risk Intelligence Specialist

    1 week ago

    Penang, Malaysia WhiteCrow Research Full time

    About WhiteCrow ResearchWe are global talent research, insight, and sourcing specialists with offices worldwide. Our international reach enables us to understand and penetrate specialist markets globally.Job Summary:The Corporate Risk Analyst will be responsible for applying open- and closed-source collection and analysis skills to author threat and risk...

  • Internship-governance,risk and Compliance Services

    2 weeks ago

    Penang, Malaysia KPMG Full time

    Internship-Governance,Risk and Compliance Services **Grade**: Internship **Department**: Internal Audit, Risk and Compliance Services **Descriptions**: KPMG, a place where bold, new ideas are welcome and dedication is rewarded, is made up of outstanding people with a broad range of interests, talents and motivations. We invite you to join our team in...

  • Corporate Risk Analyst

    3 weeks ago

    Penang, Malaysia WhiteCrow Research Full time

    About WhiteCrowWe are global talent research, insight, and sourcing specialists with offices in the UK, USA, Singapore, Malaysia, Hong Kong, Dubai, and India. Our international reach has helped us to understand and penetrate specialist markets at a global level. In addition to this, our service is also extended to complement our client's in-house talent...

  • Specialist Cyber Security

    1 week ago

    Penang, Malaysia Infineon Technologies Full time

    T he area Cyber Security consists of various areas of expertise, which require dedicated skill sets, experience and backgrounds. A Junior Specialist/Analyst is responsible to: P - erform incident response for security incidents across the Infineon globally. M - onitoring of the IFX-wide connected intrusion detection and video surveillance equipment. A -...

  • Project Governance Specialist

    13 hours ago

    Penang, Malaysia Celestica Inc. Full time

    Day-to-Day ResponsibilitiesManage daily program activities, including resource allocation, risk management, and issue resolution.Determine program governance, including controls, to ensure compliance and best practices.Coordinate with cross-functional teams to align deliverables with program objectives.BenefitsOpportunity to work with a leading technology...

  • Training Specialist II

    4 days ago

    Penang, Malaysia Jabil Circuit Full time

    SUMMARYThe Training Specialist II (System) will support the digital transformation of Learning & Development (L&D) processes through the effective use of Learning Management Systems (LMS) and digital tools. This role involves assisting in the configuration, deployment, and maintenance of learning platforms, supporting process improvements, conducting data...

  • Cybersecurity Specialist

    4 days ago

    Penang, Malaysia Celestica Inc. Full time

    About the RoleCelestica Inc. is seeking a highly skilled Cybersecurity Specialist to join our team. As a key member of our Information Security department, you will be responsible for administering key security solutions, providing 3rd level security support, and making risk assessments.You will have the opportunity to work with our larger security team to...

  • Staff Specialist Information Technology

    2 weeks ago

    Penang, Malaysia Infineon Technologies AG Full time

    Job DescriptionIn your new role you will:As an IT application owner, provide functional and business consulting for global Finance applications. You will be responsible for collaborating with global stakeholders to gather requirements, developing and implementing IT solution proposals, and driving the definition of the business roadmap.Your responsibility...