Marsh McLennan

Specialist, IT Compliance & Controls

Malaysia · Hybrid · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

  • EmployerMarsh McLennan
  • LocationMalaysia
  • Work styleHybrid
  • Employment typeFull time
  • Employer posted

Company:

Marsh Risk

Description:

We are seeking a talented individual to join our Information Technology team, part of our risk business at Marsh. This role will be based in Kuala Lumpur, Malaysia. This is a hybrid role that has a requirement of working at least three days a week in the office.

You will support our regional IT Operations team in maintaining and enhancing our cybersecurity and operational security posture across the Asia-Pacific region. This role encompasses vulnerability management, IT operational controls compliance, risk assessment, and security metric reporting to our CISO team. You will work closely with business teams, IT compliance colleagues, and stakeholders across multiple time zones to deliver on critical security and compliance initiatives.

We will count on you to:

Monitor and coordinate vulnerability management activities (DAST, SAST, Pen testing, infrastructure scans, SSL certificates and protocola) and support remediation tracking to meet SLAs

Show full description

Monitor and manage IT operational controls compliance including user access reviews, service account management, multi-factor authentication rollout, password policy compliance, and risk management.

Support disaster recovery planning and execution, including annual DR plan reviews and database restore testing

Coordinate with vendors and business stakeholders on security requirements, third-party risk assessments, and incident response audit findings

Prepare weekly security metrics reporting and monthly operating reports for regional leadership and the CISO team

What you need to have:

Approximately 6+ years of experience in IT compliance, controls, cybersecurity, or a related field with exposure to security tools and concepts

Strong project management and administrative skills with the ability to prioritise workload and manage multiple stakeholders independently

Demonstrated attention to detail and commitment to meeting SLAs and compliance requirements; ability to learn and grow in cyber security domain

What makes you stand out?

Experience with cyber security concepts, vulnerability scanning tools (SNYK, GitGuardian, Edgescan, Bitsight), and security platforms (SIEM, IAM, MFA, DARE)

Ability to work across time zones and collaborate effectively with regional and global security teams

Demonstrated ability to lead or assist with small security-focused projects and contribute to global security posture initiatives

Why join our team:

We help you be your best through professional development opportunities, interesting work and supportive leaders.

We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.

Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.

Marsh is committed to creating a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.

Staying safe while you apply

  • Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
  • Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
  • Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

  • Check the fit.

    Compare the requirements with the experience you have confirmed, including gaps.

  • Prepare honestly.

    Build interview stories and application drafts from your own evidence.

  • Keep track.

    Save the role and record your own application status and follow-ups.

Create a free workspace or log in.

At a glance

  • Work styleHybrid
  • Employment typeFull time
  • Employer posted
  • Added to ROLIVA
  • Last checked

Explore similar roles

Similar jobs