Security Compliance Specialist/ Compliance Engineer (GRC)

Salary: RM 4,800 – RM 7,000 per month

Company Introduction:

At SNSoft, we're at the forefront of technological advancement, integrating cutting-edge solutions into everyday life. Our culture thrives on innovation, collaboration, and a commitment to excellence. We foster an inclusive environment where every team member's contribution is valued and where everyone has the opportunity to grow.

Benefits and Compensation:

• Competitive salary range depending on experience.

• Project Incentive (upon Company Declaration based on project performance)

• Transport, Meal, Birthday Allowances (upon Confirmation)

• Sports Activities (Badminton & Basketball), Company Outing

• Training and certification sponsored by company (Selected employees).

• Optical, Dental, Body Check Up Claim (upon Confirmation)

Job Summary:

Handle the day-to-day implementation and maintenance of compliance requirements such as PCI DSS: evidence collection, documentation, remediation tracking, and coordination with external assessors.

Key Responsibilities:Compliance (GRC):

• Support and execute PCI DSS annual maintenance: collect and organize evidence per control, maintain compliance documentation, track remediation items to closure

• Coordinate scheduling and logistics with QSA / ASV / annual pentest and follow up on external-assessor communications

• Maintain security policies, process docs, and compliance records (risk register, third-party / vendor inventory, etc.)

• Follow up on collection and updates of third-party / vendor compliance materials

• Assist in preparing and reusing compliance materials for multi-region expansion

• Run the logistics of company-wide security awareness training and phishing drills (scheduling, notices, record-keeping)

• Coordinate with engineering / ops / business to follow up on compliance-related remediation

Security Operations (SOC / SIEM):

• Participate in day-to-day security operations: triage, analyze, and handle security alerts; escalate and follow up on security incidents per established procedures

• Maintain the SIEM / logging platform: onboard and validate log sources, author and tune detection rules (use cases), configure dashboards and alert notifications

• Drive false-positive reduction and continuously tune detection rules to lower noise

• Produce regular security operations reports (alert trends, incident retrospectives, shift handover records, etc.)