Security Compliance Specialist/ Compliance Engineer (GRC)
Salary: RM 4,800 – RM 7,000 per month
Company Introduction:
At SNSoft, we're at the forefront of technological advancement, integrating cutting-edge solutions into everyday life. Our culture thrives on innovation, collaboration, and a commitment to excellence. We foster an inclusive environment where every team member's contribution is valued and where everyone has the opportunity to grow.
Benefits and Compensation:
Competitive salary range depending on experience.
Project Incentive (upon Company Declaration based on project performance)
Transport, Meal, Birthday Allowances (upon Confirmation)
Sports Activities (Badminton & Basketball), Company Outing
Training and certification sponsored by company (Selected employees).
Optical, Dental, Body Check Up Claim (upon Confirmation)
Job Summary:
Handle the day-to-day implementation and maintenance of compliance requirements such as PCI DSS: evidence collection, documentation, remediation tracking, and coordination with external assessors.
Key Responsibilities:
Compliance (GRC):
Support and execute PCI DSS annual maintenance: collect and organize evidence per control, maintain compliance documentation, track remediation items to closure
Coordinate scheduling and logistics with QSA / ASV / annual pentest and follow up on external-assessor communications
Maintain security policies, process docs, and compliance records (risk register, third-party / vendor inventory, etc.)
Follow up on collection and updates of third-party / vendor compliance materials
Assist in preparing and reusing compliance materials for multi-region expansion
Run the logistics of company-wide security awareness training and phishing drills (scheduling, notices, record-keeping)
Coordinate with engineering / ops / business to follow up on compliance-related remediation
Security Operations (SOC / SIEM):
Participate in day-to-day security operations: triage, analyze, and handle security alerts; escalate and follow up on security incidents per established procedures
Maintain the SIEM / logging platform: onboard and validate log sources, author and tune detection rules (use cases), configure dashboards and alert notifications
Drive false-positive reduction and continuously tune detection rules to lower noise
Produce regular security operations reports (alert trends, incident retrospectives, shift handover records, etc.)
Support vulnerability management and incident response, tracking related remediation to closure (in sync with compliance remediation tracking)
Required Qualifications:
Education: Bachelor’s or Master’s degree in Computer Science, Engineering, Mathematics, Statistics, or a related field.
2+ years in security compliance / information security management systems
Participated in implementing or maintaining at least one of PCI DSS / ISO 27001 / SOC 2
Working knowledge of security operations: common attack techniques, log analysis, and incident handling workflows
Hands-on experience with at least one SIEM / log analysis platform (e.g., Splunk, Elastic, Alibaba Cloud SLS / Security Center
Familiar with compliance evidence and documentation management; detail-oriented and organized
Good communication and coordination skills to move cross-team items forward
Basic understanding of cloud environments (Alibaba Cloud / AWS / Tencent)
Nice to Have:
Full participation in a PCI DSS certification cycle
Front-line SOC experience (alert handling, incident response, on-call rotation)
Familiarity with Alibaba Cloud security products (Security Center, SLS, WAF, Cloud Firewall, etc.)
Basic scripting (Python / Shell) for log processing or operations automation
Compliance experience in payments / fintech / large internet platforms
CISA / ISO 27001 Lead Auditor / Security+ / CySA+ or similar
Uses tools / AI to improve documentation, evidence management, and security operations efficiency