6412 - IT Security Manager

Agensi Pekerjaan Minde Group Sdn Bhd; Penang; On-site; MYR 180,000 - 270,000; Full time

Job summary

Agensi Pekerjaan Minde Group Sdn Bhd is seeking an IT Security Manager to lead security governance, policy design, and risk management for a Malaysia-based manufacturing group. The role includes incident response, monitoring, and driving ISO 27001 compliance across systems.

We require 8+ years in IT infrastructure and networking, with at least 3 years in IT security, plus strong English communication and a relevant bachelor’s degree. Leadership and cross-functional collaboration are essential.

Qualifications

• 8+ years of experience in IT infrastructure and networking with 3+ years in IT security.
• Experience in large-scale manufacturing environments is preferred.
• ISO 27001 certification is an added advantage.
• Security-related certifications are an added advantage.
• Proven ability to work with diverse teams of business users, IT staff, and consultants.

Responsibilities

• Develop and implement security policies in alignment with standards and regulatory requirements.
• Conduct risk assessments and manage mitigation strategies across the organization.
• Lead incident response including containment, eradication, and recovery; maintain incident response plans.
• Develop and deliver security awareness training for employees to promote secure practices.
• Ensure compliance with regulations and standards such as ISO 27001; prepare for audits.
• Monitor security tools, report on security status and improvements to senior management.
• Collaborate with IT teams and external partners to integrate security into projects; provide guidance.

Skills

IT security management

IT infrastructure

Networking

Policy development

Communication in English

Self-learning

Education

Bachelor's degree in Computer Science, IT, Engineering, Technology or related discipline

Job description

About the job 6412 - IT Security Manager

CompanyOverview:

Established in 1984 and headquartered in Malaysia, the group boasts over 40 years of experience in the electronics manufacturing sector. It specializes in delivering high-quality, innovative solutions to customers worldwide with global facilities also located in other 4 country.

Job Responsibilities:

• Develop and Implement Security Policies: Design, implement, and maintain IT security policies and procedures in alignment with industry standards and regulatory requirements.
• Risk Assessment and Management: Conduct regular risk assessments to identify potential vulnerabilities and develop mitigation strategies. Ensure that risk management practices are integrated into all aspects of the organization.
• Incident Response:Lead the response to security incidents, including investigation, containment, eradication, and recovery. Develop and maintain incident response plans and conduct regular drills.
• Security Awareness Training:Develop and deliver security awareness training programs for employees to promote a culture of security and ensure adherence to security policies and procedures.
• Compliance Management:Ensure compliance with relevant regulations and standards, such as GDPR, ISO 27001, and other applicable frameworks. Prepare for and manage external audits and assessments.
• Monitoring and Reporting:Implement and manage security monitoring tools to detect and respond to threats in real time. Prepare and present regular reports on security status, incidents, and improvements to senior management.
• Collaboration:Work closely with IT teams, management, and external partners to ensure that security measures are integrated into all projects and operations. Provide guidance and support on security-related matters.
• Continuous Improvement:Stay up-to-date with the latest security trends, threats, and technologies. Continuously improve security practices and recommend enhancements to existing systems and processes.

Job Requirement:

• 8+ years of experience in IT infrastructure and networking, out of which 3+ years focused on IT security.
• IT security management experience and exposure in a large-scale manufacturing environment.
• Experience in ISO 27001 certification is an added advantage.
• Security-related certification is an added advantage.
• Proficient and proven experience working with diverse teams of business users, IT technical team, consultants on all phases of the software development life cycle.
• Hands-on, motivated, and proactive individual who is good at self-learning and desire to continuously learn.
• Excellent written and oral communication skills in English.
• Excellent interpersonal skill, result-oriented, strong sense of responsibility and attention to details.
• Bachelor's degree in Computer Science, IT, Engineering, Technology or related discipline.