Skip to main content

External opportunity

IAM Controls & Compliance Specialist

Kuala Lumpur Not specified

Added 4 Nov 2026 · Other

Job description

Role Summary: The IAM Controls & Compliance Specialist is responsible for designing, implementing, monitoring, and validating IAM controls to ensure compliance with internal policies, regulatory requirements, and audit expectations. The role serves as the primary control assurance function within the IAM operating model. Key Responsibilities IAM Control Framework Validate the Design and Operating effectiveness of IAM control standards and control libraries. Ensure alignment with regulatory, risk, and cybersecurity requirements. Control Monitoring & Testing Drive IAM control monitoring programs. Establish control effectiveness testing methodologies. Track and manage control exceptions and remediation activities. Access Governance Compliance Assess effectiveness of JML, PAM, and access certification controls. Validate segregation of duties (SoD) and least privilege requirements against the compliance with identity lifecycle and privileged access policies. Metrics and Assurance Reporting Monitor and report on control deficiencies and risk indicators. Audit Management Support audit reviews and regulatory examinations. Maintain control evidence repositories. Ensure management actions are effectively implemented and validated. Required Skills & Experience 3+ years of experience in IAM Controls, IT Risk, IT Audit, Cybersecurity Compliance, or Technology Risk. Strong understanding of IAM controls testing, and audit requirements. Familiar supporting regulatory, internal audit, or external audit programs. Strong analytical and documentation skills. Preferred Qualifications CRISC, CISM, ISO 27001 Lead Auditor, or equivalent. Financial services industry experience.
Pay, skills & work eligibility

Compensation

A clear compensation amount was not identified. Ask the employer for the range, currency, pay period and whether it covers base pay or total compensation.

Location, eligibility & working hours

Listed work location
Kuala Lumpur
Visa sponsorship
Not stated clearly
Relocation support
Not stated clearly
Working hours / time zone
Not stated clearly

Remote does not automatically mean work from any country. A location match does not confirm work authorization, sponsorship or relocation eligibility.

Requirements at a glance

Experience mentioned: 3+ years

Cybersecurity

Named skills identified in the listing. A mention is not always a requirement; read the full description and employer conditions.