Brooks is a leading provider of automation solutions with over 40 years of experience in the semiconductor industry, offering precision robotics, integrated automation systems, and contamination control solutions that empower chip manufacturers worldwide. Our product portfolio includes a range of automation solutions, including robots, vacuum systems, and atmospheric robots for semiconductor manufacturing ( www.brooks.com ).
Are you looking for a place where you can be part of a transformation? Join us at Brooks Automation and be a part of a dynamic organization that is shaping the future of technology.
Governance, Risk & Compliance (GRC) Analyst
Job Description
About the Role:
Brooks Automation is a rapidly growing technology leader in automation solutions serving the Semiconductor and Laboratory Automation industries worldwide. Our customers include some of the world's largest and most security-conscious technology manufacturers. As Brooks continues to expand its information security, compliance, and governance programs, we are seeking a highly motivated Governance, Risk & Compliance (GRC) Analyst to join our Information Security team.
This role will help drive Brooks' information security management system (ISMS), regulatory readiness efforts, customer cybersecurity requirements, supplier security assurance activities, and governance initiatives. The successful candidate will work directly with the CISO and business stakeholders across IT, Engineering, Product, Legal, HR, Operations, and Quality to strengthen Brooks' security and compliance posture.
This is not a checkbox compliance role. We are looking for a practitioner who can translate frameworks and requirements into operational processes that improve security outcomes while enabling the business.
Work Location: ONSITE - Johor Bahru (OR) Penang.
Key Responsibilities:
Governance & Compliance
Support and maintain Brooks' ISO 27001 Information Security Management System (ISMS)
Coordinate internal audits, external audits, surveillance audits, and certification activities
Assist with policy development, policy reviews, standards, procedures, and governance documentation
Maintain control ownership, evidence repositories, and audit readiness documentation
Coordinate remediation tracking and corrective action plans
Risk Management
Facilitate cybersecurity risk assessments and business impact discussions
Maintain risk registers and assist control owners with mitigation planning
Track risk treatment plans and exceptions
Support management reporting, metrics, and risk dashboards
Customer & Regulatory Assurance
Respond to customer security questionnaires and due diligence requests
Support supplier and third-party security reviews
Assist with regulatory and customer requirements including: ISO 27001
NIST Cybersecurity Framework
NIST 800-171
GDPR
Cyber Resilience Act (CRA)
Semiconductor customer security requirements
Partner with Legal and business stakeholders on security-related contractual requirements
Security Awareness & Training
Coordinate annual security awareness training campaigns
Manage phishing simulation programs
Track participation and compliance metrics
Develop security awareness communications and educational materials
Incident & Operational Governance
Support incident management governance activities
Ensure incidents are properly documented and tracked
Assist with lessons learned and corrective action reviews
Help maintain security program documentation, standards, procedures, and evidence libraries
Program Operations
Support Security Council activities and management reviews
Develop metrics, dashboards, and executive reporting
Assist with annual policy reviews and governance initiatives
Drive continuous improvement activities across the security program
Required Qualifications:
5-7 years of experience in Governance, Risk & Compliance, Information Security, Internal Audit, IT Audit, Risk Management, or related discipline
Working knowledge of information security…