Job Description

Responsibilities

Lead and manage daily IT security operations, including incident response, vulnerability management, patching, penetration testing, and post-incident reviews. Monitor servers, networks, and endpoints for threats, investigate breaches/attempts, and recommend corrective actions. Conduct IT security assessments, define requirements and controls, and ensure compliance with industry standards, regulations, and BNM guidelines. Design and implement secure system, network, and application architectures; act as subject matter expert for IT security controls, risk mitigation, and remediation. Deliver security awareness training, phishing simulations, and provide guidance across teams on best practices. Support internal/external audits, track remediation efforts, and ensure timely closure of compliance gaps. Develop, review, and maintain IT security policies, procedures, and reports with actionable recommendations for continuous improvement.

Requirements

Bachelor's degree in Computer Science, Information Security, IT, or equivalent. Professional certifications (CISSP, CEH, CRISC, GIAC, etc.) are highly valued. At least 6 years of hands-on experience in IT security technologies and operations (e.g., Zero Trust, Firewalls, IDS/IPS, SIEM, VPN, WAF, DLP, Encryption). Proven experience in security architecture, vulnerability assessments, compliance, SOC/MSS monitoring, and incident response. Strong project leadership, vendor management, and stakeholder engagement skills. Excellent problem-solving, analytical, communication, and presentation abilities. Flexible, proactive, and able to manage multiple priorities under tight deadlines. Willingness to provide after-hours support for urgent incidents.
Job Type: Full-time

Pay: RM7,000.00 - RM9,000.00 per month

Benefits:

Additional leave Dental insurance Flexible schedule Health insurance Maternity leave Opportunities for promotion Parental leave Professional development Vision insurance
Work Location: In person