Cyber Risk Analyst

5 months ago

Kuala Lumpur, Malaysia S&P Global Full time

**About the Role**:
**Grade Level (for internal use)**: 08
S&P Global Corporate

**About the Role**: Cyber Risk Analyst

This role helps reduce the cyber risk posed by third parties and protects S&P Global brands against possible attacks against our information assets by threat actors via backdoor created by our vendors. Primary responsibilities will include assessing Cybersecurity, Business Continuity controls for S&P third parties by conducting control risk assessments, risk recertification's, and continuously monitoring the vendors engaged by S&P.

**The Team**: As part of Vendor Risk Management, the Vendor Cyber Risk Management team manages the Supply Chain Cyber risks by performing risk assessments of third-party engagements to identify and reduce the risks posed by third parties. This is an extremely important role, considering the fact that large number of data breaches happen due to third parties. It involves working with internal stake holders as well as third parties to achieve the results.

**Responsibilities and Impact**: Working in Vendor Risk Management offers the opportunity to continuously enhance processes to meet the evolving requirements of various regulators. This challenging environment provides ample opportunities to expand your knowledge and expertise.
In addition to risk assessments, recertification's, and continuous monitoring, you will participate in various projects, allowing you to showcase and further develop your skills and experience.

Conduct thorough Cybersecurity, Business Continuity, Artificial Intelligence, Cloud Service Prover and Privacy assessments for Vendors, evaluating their information security policies, procedures, and controls.

Effectively collaborate with internal teams to identify critical vendors and assess their potential impact on the organization's cyber risk profile.

Communicate risk assessment findings and recommendations to key stakeholders, including senior management, legal, and compliance teams.

Work closely with vendors to address identified security gaps and ensure they meet the organization's cybersecurity requirements.

Review the vendors on the continuous monitoring program and assisting in driving the periodically review the vendors.

Monitor and stay abreast of evolving cybersecurity threats and industry trends to enhance the effectiveness of the risk assessment process.

Lead and support enhancement projects within Vendor Risk Management to meet various business and regulatory requirements.

Assist the team members in balancing the load and managing Ad-hoc projects.

**What We’re Looking For**:Basic Required Qualifications**:
Bachelor’s degree in computer science or engineering or equivalent

Minimum 3 years of experience in Information Security or Technology Risk Management

Any prior exposure to vendor risk management and/ or privacy laws and regulations is a plus.

Demonstrable understanding of the concepts of technology controls and information security controls.

Exposure to cloud technologies and cloud security is highly desired; the familiarity with pubic cloud technologies such as Amazon Web Services (AWS) or Microsoft Azure or Google Cloud is highly preferred.

Excellent communication skills - a must. The resource should have the ability to communicate with cross-functional teams and vendors, both written and oral communication is critical.

**Additional Preferred Qualifications**:
This position is required to work in UK Shift; flexibility is a must, especially when it comes to vendor and internal meetings held during US business hours.

Strong organizational skills with the ability to multitask and prioritize while maintaining close attention to detail.

Ability to build strategic partnerships with internal stakeholders.

Must be a critical thinker with strong qualitative skills.

Information Security/Risk Management certification would be an advantage.

**Return to Work**: Have you taken time out for caring responsibilities and are now looking to return to work? As part of our Return to Work initiative, Restart, we are encouraging enthusiastic and talented returners to apply, and will actively support your return to the workplace.

What’s In It For You?

**Our Purpose**:
Progress is not a self-starter. It requires a catalyst to be set in motion. Information, imagination, people, technology-the right combination can unlock possibility and change the world.

Our world is in transition and getting more complex by the day. We push past expected observations and seek out new levels of understanding so that we can help companies, governments and individuals make an impact on tomorrow. At S&P Global we transform data into Essential Intelligence®, pinpointing risks and opening possibilities. We Accelerate Progress.

**Our People**:
We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help b

  • Cyber Threat Analyst

    5 months ago

    Kuala Lumpur, Malaysia YTL-Sea Digital Bank Project Full time

    **About the Team**: Are you eager to elevate your career to new heights? Join us for an exhilarating opportunity to pioneer our groundbreaking digital bank project, where boundless possibilities await! We're thrilled to extend an invitation for you to join our vibrant team of visionaries, innovators, and trailblazers. As a Cyber Threat Analyst of our...

  • Cyber Security Response Analyst

    5 months ago

    Kuala Lumpur, Malaysia Aveva Full time

    AVEVA is a global leader in industrial software. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life - such as energy, infrastructure, chemicals and minerals - safely, efficiently and more sustainably. We’re the first software business in the world to have our sustainability targets validated by the SBTi, and...

  • Cyber Security Analyst

    6 months ago

    Kuala Lumpur, Malaysia SSquad Global Full time

    **RESPONSIBILITIES** A cybersecurity analyst protects company hardware, software, and networks from cybercriminals. The analyst's primary role is to understand company IT infrastructure in detail, to monitor it at all times, and to evaluate threats that could potentially breach the network. **RESPONSIBILITIES** **To support regional operation**: -...

  • Assistant Manager, Cyber Risk Management

    5 months ago

    Kuala Lumpur, Malaysia Affin Bank Full time

    Assistant Manager, Cyber Risk Management **Create your future with Affin! You too can make a difference.** Join us at AFFIN, where the open minds meet and be inspired by a shared commitment to great work. Here, you don't just stay at the forefront of the industry - you can make a difference too. **Job Purpose** Ensure the governance and oversight on the...

  • Business Analyst

    5 months ago

    Kuala Lumpur, Malaysia Skill quotient Full time

    Greetings from Skill quotient! We are hiring for Malaysians! Position: Business Analyst(Cyber security) 1 Year extended contract Payroll: Skill quotient Location: KL **Requirements**: Total 5+ years of exp 3-4 years of professional experience as a Business Analyst in the Cyber Security Industry. +918700751647 **Salary**: RM6,000.00 - RM8,000.00 per...

  • Cyber Defense Analyst

    5 months ago

    Kuala Lumpur, Malaysia YTL-Sea Digital Bank Project Full time

    **Job Description**: **About the Team**: Are you eager to elevate your career to new heights? Join us for an exhilarating opportunity to pioneer our groundbreaking digital bank project, where boundless possibilities await! We're thrilled to extend an invitation for you to join our vibrant team of visionaries, innovators, and trailblazers. As a Cyber...

  • Risk Management Analyst

    5 months ago

    Kuala Lumpur, Malaysia Avensys Consulting Sdn Bhd Full time

    **Responsibilities** - Independently assess the effectiveness of SDLC and Change Management controls, determine the impact of control issues, identify corrective action, and track issues to closure. - Perform risk assessments, regulatory and compliance assessments for services and processes. - Work with stakeholders to remediate any identified weakness or...

  • IT Cyber Security Analyst

    6 months ago

    Kuala Lumpur, Malaysia Ekco Full time

    **About Ekco** Founded in 2016 Ekco is now one of the leading cyber security and cloud solution providers in Europe! We specialise in enabling companies to progress along the path of cloud maturity, managing transformation and driving better outcomes from our customers’ existing technology investments. - ️ In a few words, we take businesses to the...

  • Cybersecurity and Cyber Resilience Risk, Vice

    5 months ago

    Kuala Lumpur, Malaysia TalentTag Asia Full time

    **About our client**: Our client is a regulatory body. They are looking for Cybersecurity and Cyber Resilience Risk, Vice President to join their team. **Main Responsibilities;** **Information Security Consulting** - Provide technical advice and solutions in alignment with best practises and security frameworks. - Actively engage with security projects and...

  • Business Analyst

    6 months ago

    Kuala Lumpur, Malaysia Skill Quotient Resources Sdn Bhd Full time

    The Cyber Security (CS) Unit under GAP (Governance Assurance and Planning) department is responsible to define, implement and monitor Cybersecurity practices for PDB and subsidiaries. We are looking to recruit an Executive who will be critical for the success of this Unit’s activities and program. Reporting to the CS Unit Head, this role also requires...

  • Risk and Compliance Analyst

    7 months ago

    Kuala Lumpur, Malaysia Munich Re Full time

    Risk and Compliance Analyst Risk and Compliance Analyst (Contract) - Munich Re Retakaful **Company** Munich Re **Location** Kuala Lumpur, Malaysia Reporting to Chief Risk and Compliance Officer of Munich Re Retakaful, you are responsible to provide an effective key second line of defence role for Munich Re Retakaful operations both from a Bank Negara...

  • Risk and Compliance Analyst

    7 months ago

    Kuala Lumpur, Malaysia Munich Re Full time

    Risk and Compliance Analyst Risk and Compliance Analyst (Contract) - Munich Re Retakaful **Company** Munich Re **Location** Kuala Lumpur, Malaysia Reporting to Chief Risk and Compliance Officer of Munich Re Retakaful, you are responsible to provide an effective key second line of defence role for Munich Re Retakaful operations both from a Bank Negara...

  • Cyber Practice

    5 months ago

    Kuala Lumpur, Malaysia Marsh Full time

    **Manager, Cyber Practice (Cyber Insurance)** **What can you expect?** - Join Global Leader in Insurance Broking and Innovative Risk Management Solutions - A team of diverse professionals across the globe, dedicated to helping clients manage some of the world’s most challenging and complex risks awaits - Dedicated learning and development programs **We...

  • Cyber Insurance Leader

    5 months ago

    Kuala Lumpur, Malaysia Marsh & McLennan Companies, Inc. Full time

    Cyber Insurance Leader **Company**: Marsh **Description**: **Cyber Insurance Leader** Marsh currently has an opportunity for an experienced Cyber Leader to join our fast-growing Cyber team in Marsh. This individual will be responsible for achieving the cyber revenue goals for our Malaysia Retail based in Kuala Lumpur. They will be responsible for...

  • Business Analyst

    6 months ago

    Kuala Lumpur, Malaysia Verinon Full time

    5 years or more experience working as a Business Analyst in large, worldwide organizations - Working experience with creating different types of business analysis and project documentation for variety of stakeholders (senior management, operation departments, vendors, end users) - Delivering projects in alignment with internal policies, standards and...

  • Sales Leader, Cyber Insurance

    7 months ago

    Kuala Lumpur, Malaysia Marsh Full time

    **Sales Leader, Cyber Insurance** Marsh currently has an opportunity for an experienced Cyber Leader to join our fast-growing Cyber team in Marsh. This individual will be responsible for achieving the cyber revenue goals for our Malaysia Retail based in Kuala Lumpur. They will be responsible for collaborating extensively through the organisation to reach...

  • Manager, Technological Risk Management

    6 months ago

    Kuala Lumpur, Malaysia Hong Leong Bank Full time

    If you are looking to excel and make a difference, take a closer look at us Functional _(job responsibilities):_ Cyber Incident Management - Being the point of contact to drive all cyber incidents managed by CERT - Create incident reports - Oversee all aspects of incident management process from evaluation to resolution - Coordinate the activities of...

  • Cyber Security Operations Centre Lead

    5 months ago

    Kuala Lumpur, Malaysia Eames Consulting Full time

    Cyber Security Operations Centre Lead Are you an experienced Cyber SOC Lead with experience working with a Managed Security Service Provider (MSSP)? If you are equipped with both technical hands-on skills as well as leadership experience, you could be the next Cyber Security Operations Centre Lead our client is looking for! As Cyber SOC Lead, you will be...

  • Audit Lead, Cyber Security

    6 months ago

    Kuala Lumpur, Malaysia RHB Banking Group Full time

    Working Hour - Regular Hours - Monday - Friday- Business Area - Internal Audit- Location - Malaysia - Kuala Lumpur- Description **Primary Objective**: - Assist in the execution of audit plan/ other assignments relating to the following areas: - Cyber security control - Technology risk management **Key Responsibilities**: - Assist in the execution of...

  • Cyber Security Analyst

    5 months ago

    Kuala Lumpur, Malaysia SSquad Global Full time

    **RESPONSIBILITIES** A cybersecurity analyst protects company hardware, software, and networks from cybercriminals. The analyst's primary role is to understand company IT infrastructure in detail, to monitor it at all times, and to evaluate threats that could potentially breach the network. **RESPONSIBILITIES** **To support regional operation**: -...