INFORMATION SECURITY OFFICER (CONTRACTUAL)

Responsible to: CISO PSI Software

Relationship: Works closely with the team of the CISO from PSI Software, Head of ICT, ICT Engineers, Total Quality Management Department and the IT users of the Company.

General Description: The Information Security Officer (ISO) is responsible for managing and maintaining the organization’s Information Security Management System (ISMS) implementation and ensuring continuous compliance with ISO/IEC 27001 and related ISO 27000 standards at PSI INCONTROL SDN BHD.

The role focuses on information security governance, risk management, compliance, and audit readiness, ensuring that the organization maintains a structured and effective security posture. The ISO acts as the central coordinator for security policies, risk assessments, and audit activities, while promoting security awareness across the organization.

Primary Job Functions:

· Implement, maintain, and continuously improve the ISMS in accordance with ISO/IEC 27001 as per the group requirements. The person will be the local execution and implementation while prioritization and approach are aligned with CF Security & Resilience, PSI Software SE.

· Ensure compliance with PSI Information Security Policies and applicable regulatory or contractual requirements

· Conduct information security risk assessments, maintain the risk register, and track mitigation actions

· Coordinate and support internal audits, external ISO certification audits

· Ensure audit remediation activities including tracking and reporting on progress and blockers

· Develop, review, and maintain information security procedures, standards, and documentation

· Monitor and report on information security risks, incidents, and control effectiveness

· Assess the impact of system changes and new technologies on information security posture

· Identify security weaknesses, recommend improvements, and coordinate implementation of corrective actions

· Work with ICT teams to ensure appropriate technical and administrative security controls are in place

· Drive security awareness and training initiatives for employees

· Act as the point of contact for all information security-related matters within the organization

Required Attitude:

· Strong analytical and problem-solving mindset with attention to detail

· High level of integrity and accountability in handling sensitive information

· Strong coordination, communication and stakeholder engagement skills

· Ability to work independently while coordinating across departments

· Committed to continuous learning in a rapidly evolving cybersecurity landscape

Required Knowledge:

· Strong understanding of Information Security principles and controls

· Working knowledge of ISO/IEC 27001 ISMS framework and compliance requirements

· Familiarity with risk assessment methodologies and audit processes

· Familiarity with industrial cybersecurity standards such as IEC 62443 is an added advantage

Required Skills:

· Experience in ISMS implementation, maintenance, and audit coordination

· Ability to develop and maintain policies, procedures, and security documentation

· Strong technical understanding of IT infrastructure, networks, and security attacks and controls

· Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor are an advantage.

Additional Desired Skills:

Education:

· Minimum Diploma or Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent.

Experience:

· 3–5 years relevant professional Information Security experience.

Work Status:

· Full-time

· Contractual

Travel:

Moderate travel may be required.