Summary: The candidate is responsible for assessing information risk and facilitates remediation of identified vulnerabilities for IT & Cybersecurity risk across the enterprise. Management of IT security infrastructures, perform security vulnerability configuration management and work closely with Business Units (BU) to ensure Information Security policies are integrated with business processes. Candidate with experience in Cybersecurity Operations, Incident Management & Response and Project would be an advantage. Responsibilities: Oversee overall operation of Security Operation Centre (SOC) and Security BAU activities. Manage Security Incident Management Team to ensure proper co-ordination in the event of security threat outbreak, initiate remediation activities and work closely with IT security team on Security investigation/forensic analysis. Resolve potential security attempt and vulnerability issues timely. To perform security risk assessment and technical reviews on projects that involves transfer of confidential data or third-party access to infrastructure. Regular meetings with Business Units/Clients/stakeholders to ensure all concerns or roadblock in business activities projects related Information Security are addressed. Proactively assess potential exposures of cyber threats and ensure adequate safeguards. Perform security vulnerability scan on network infrastructures to identify security weakness and work on the necessary remediation. Responsible for Cybersecurity incident response management and recovery process. Identifies and resolves potential security breaches and vulnerability issues in a timely and accurate method. Manage Information Security projects to comply with the Group and Regulatory requirements especially on work together with Risk Management and Compliance on the Bank Negara Malaysia (BNM) Risk Management in Technology (RMiT). Assess potential exposures to cyber threats arising from arrangements to ensure adequate safeguards and a defined process for reporting security incidents. Recommend improvements and upgrades to the security posture of the organization. Manage overall information security compliance including Threat Monitoring, Patch Management, Vulnerability Management, Antivirus Management, Hardening and identity management. Ensure risk control issues are updated in risk matrix & tracked. Ensure all audit findings are tracked, remediated & closed on timely manner. Coordinate with Security vendors/Group on management critical infrastructures: SOC, SIEM, WAF/firewall, proxy, etc. Conduct review on the configuration and rules settings for all security devices. Ensure that the Penetration Test being performed monthly and annually for systems. Perform annual user account recertification for all critical systems. Coordinate regular assessments of cloud infrastructure security posture and configurations to identify vulnerabilities and risks. Conduct IT Security Awareness Program and training to educate all employees. Requirements: Diploma/Degree or higher with at least 10 years' IT security experience in similar industries environment. Information Security certifications preferred. Minimum of 7 years of relevant experience. Ability to work independently and as a team player under tight deadlines. Knowledge of regulatory requirements (e.g., RMiT) and risk assessment. Technical expertise in security engineering, computer and network security, authentication, protocols, and cryptography. Strong understanding of cybersecurity frameworks and experience with security systems like WAF, IPS, DLP, PAM, IAM, SIEM, EDR, FIM, and cloud initiatives. Ability to manage multiple IT security projects simultaneously, work independently, and problem-solve analytically. Strong communication skills at all organizational levels. Show more Show less