Looking for a job

Sahmeeha Poongan

@sahmeehapoongan

Cybersecurity GRC analyst at Aerodyne Malaysia who implemented an ISO/IEC 27001:2022-aligned ISMS and prepared for SOC 2 Type 2.

Malaysia

Message

What I'm looking for

I'm seeking to continue developing in Cybersecurity GRC, Information Security, and IT/OT Security.

At CAL ASIA (Singapore) Pte Ltd - Biocon Biologics Malaysia, I support IT/OT systems in a regulated pharmaceutical manufacturing environment. My work includes managing production user access and supporting security hardening for SCADA, HMI, and PLC systems.

I also support Computer System Validation activities, prepare audit evidence, and help verify backups for production and automation systems. I participate in MES and smart-manufacturing initiatives across Production IT and Operations Technology.

At Aerodyne Malaysia, I implemented and maintained an ISO/IEC 27001:2022-aligned ISMS and led SOC 2 Type 2 readiness activities. I conducted internal audits, tracked findings through remediation, and performed third-party risk assessments.

Earlier, as an IT Audit Intern at PwC Malaysia, I assessed ITGC controls and documented audit evidence. I'm pursuing a Master’s in Cybersecurity and seeking to continue developing in Cybersecurity GRC, Information Security, and IT/OT Security.

Experience

Work history, roles, and key accomplishments

Current

IT Support Engineer - Production IT / IT-OT Security

Current

CAL ASIA (Singapore) Pte Ltd - Biocon Biologics Malaysia

Dec 2025 - Present (10 months)

Support IT/OT systems in a regulated pharmaceutical manufacturing environment, ensuring system availability, security, and compliance with internal SOPs. Manage production user accounts, support security hardening for SCADA, HMI, and PLC systems, and assist with CSV activities and audit evidence preparation.

IT OT Security SCADA HMI PLC Security Hardening User Access Management Backup And Recovery Computer System Validation (CSV)GxP MES Synchronization

Executive, Cybersecurity Governance, Risk & Compliance

Aerodyne Malaysia

Apr 2025 - Oct 2025 (6 months)

Implemented and maintained an ISO/IEC 27001:2022-aligned ISMS, including policies, risk assessments, and treatment plans. Led SOC 2 Type 2 readiness, conducted internal audits, performed third-party risk assessments, and delivered security awareness activities.

ISO 27001 ISMS Risk Assessment SOC2 ITGC Internal Audit Third Party Risk Management Security Awareness Incident Response GRC Automation KPI Dashboards

IT Audit Intern

PwC Malaysia

Oct 2023 - Feb 2024 (4 months)

Performed ITGC assessments covering user access, change management, and backup controls. Conducted audit testing using PwC tools and large-scale data analysis, and presented findings and remediation recommendations to client stakeholders.

ITGC Audit testing Data Analysis Risk Assessment Audit Methodology IT Policy Evaluation Documentation