Added 4 Nov 2026 · Other
Job description
Role Summary: The IAM Controls & Compliance Specialist is responsible for designing, implementing, monitoring, and validating IAM controls to ensure compliance with internal policies, regulatory requirements, and audit expectations. The role serves as the primary control assurance function within the IAM operating model.
Key Responsibilities
IAM Control Framework
Validate the Design and Operating effectiveness of IAM control standards and control libraries.
Ensure alignment with regulatory, risk, and cybersecurity requirements.
Control Monitoring & Testing
Drive IAM control monitoring programs.
Establish control effectiveness testing methodologies.
Track and manage control exceptions and remediation activities.
Access Governance Compliance
Assess effectiveness of JML, PAM, and access certification controls.
Validate segregation of duties (SoD) and least privilege requirements against the compliance with identity lifecycle and privileged access policies.
Metrics and Assurance Reporting
Monitor and report on control deficiencies and risk indicators.
Audit Management
Support audit reviews and regulatory examinations.
Maintain control evidence repositories.
Ensure management actions are effectively implemented and validated.
Required Skills & Experience
3+ years of experience in IAM Controls, IT Risk, IT Audit, Cybersecurity Compliance, or Technology Risk.
Strong understanding of IAM controls testing, and audit requirements.
Familiar supporting regulatory, internal audit, or external audit programs.
Strong analytical and documentation skills.
Preferred Qualifications
CRISC, CISM, ISO 27001 Lead Auditor, or equivalent.
Financial services industry experience.
Pay, skills & work eligibility
Compensation
A clear compensation amount was not identified. Ask the employer for the range, currency, pay period and whether it covers base pay or total compensation.
Location, eligibility & working hours
- Listed work location
- Kuala Lumpur
- Visa sponsorship
- Not stated clearly
- Relocation support
- Not stated clearly
- Working hours / time zone
- Not stated clearly
Remote does not automatically mean work from any country. A location match does not confirm work authorization, sponsorship or relocation eligibility.
Requirements at a glance
Experience mentioned: 3+ years
Named skills identified in the listing. A mention is not always a requirement; read the full description and employer conditions.