{"id":3448002,"url":"https://alion.io/job/conjointly-senior-cybersecurity-and-grc-analyst","title":"Senior Cybersecurity and GRC Analyst","company":{"id":8273,"name":"Conjointly","domain":"conjointly.com","url":"https://alion.io/company/conjointly","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["MY"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":43000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-29T09:26:27Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-10-31T04:44:08Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Conjointly is an all-in-one survey research platform, with easy-to-use advanced tools, real human respondents in your target audience, and expert researchers on hand, covering everything from simple surveys to advanced conjoint, product, and pricing research, as well as conversational and video surveys.\nWe are looking for a Senior Cybersecurity and GRC Analyst to keep Conjointly secure. You will monitor and protect our systems, find vulnerabilities, and make sure risks are closed rather than just recorded. Around 70 to 80% of the role is hands-on cybersecurity; the rest supports our governance, risk and compliance (GRC) work for SOC 2, ISO/IEC 27001 and ISO/IEC 27701.\nResponsibilities:\nCybersecurity\nPlanning & Coordination: Plan and coordinate cybersecurity activities across the business, and keep security policies and procedures in line with best practice.\nSecurity Monitoring: Monitor and triage security alerts across our environments, logging and monitoring tools, and endpoints, and help strengthen our monitoring, including centralised log monitoring.\nThreat Investigation: Investigate suspicious activity such as phishing, unusual logins and malware, and track emerging threats that could affect us.\nVulnerability Management: Run vulnerability scans, validate and triage findings and bug bounty reports, and work with developers on fixes.\nAccess Oversight: Oversee and review user access managed by other teams, including privileged accounts and timely removal of leavers’ access.\nRisk Assessment: Identify and assess cybersecurity risks, and follow up with owners until every issue is closed.\nSecurity Controls: Recommend, tune and monitor security controls to prevent and detect breaches.\nIncident Response: Investigate, document and coordinate the response to security incidents, and contribute to post-incident reviews.\nSecurity Awareness: Run security awareness training and phishing simulations for all staff.\nReporting: Maintain incident logs and risk reports, and present cybersecurity updates at the annual management meeting.\nGovernance, risk and compliance (GRC)\nSecurity Questionnaires: Complete supplier and customer security questionnaires and compliance requests.\nPenetration Testing: Arrange penetration tests and liaise with testers.\nAudit Support: Supply technical evidence for SOC 2, ISO/IEC 27001 and ISO/IEC 27701 audits, and help keep security documentation audit-ready.\nRisk Management Meetings: Run the risk management meeting and keep the risk register up to date.\nRequirements\nDegree in Computer Science, IT, Cybersecurity or a related field, or equivalent experience.\nAt least one cybersecurity certification is required, such as CISSP, CompTIA CySA+, GIAC (GCIH or GSEC) or a cloud security certification.\n5+ years of hands-on cybersecurity experience, including security operations, vulnerability management and incident response; experience in a larger or regulated organisation is preferred.\nStrong knowledge of cloud, network, endpoint, identity and application security.\nHands-on experience with AWS security services, log monitoring, endpoint management and protection, and vulnerability scanning tools; SIEM and EDR experience is highly regarded.\nFamiliarity with SOC 2, ISO/IEC 27001 and ISO/IEC 27701, including audit evidence and security questionnaires.\nIndependent, cautious and thorough, with the persistence to follow up with colleagues at all levels until work is done.\nAble to explain risk clearly to non-technical staff and present to management.\nBenefits\nOpportunity to grow into a security leadership role.\nEngaging and dynamic team working towards a common mission.\nCompetitive salary.\nSponsorship of annual maintenance and membership fees for relevant cybersecurity certifications.","description_format":"text","description_chars":3749,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Malaysia","iso":"MY","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Market Research","Survey & Forms Software"],"lifecycle":[{"event":"open","at":"2026-10-29T09:26:27Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":29,"reasons":["conf:1","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/conjointly-senior-cybersecurity-and-grc-analyst","json_url":"https://alion.io/job/conjointly-senior-cybersecurity-and-grc-analyst.json","meta":{"generated_at":"2026-10-31T06:16:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9174,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8273},"rest":"https://alion.io/mcp/rest/get_company?id=8273"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fconjointly-senior-cybersecurity-and-grc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fconjointly-senior-cybersecurity-and-grc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fconjointly-senior-cybersecurity-and-grc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/conjointly-senior-cybersecurity-and-grc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fconjointly-senior-cybersecurity-and-grc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3448002}},{"tool":"search_jobs","arguments":{"company":"conjointly.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3448002},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}