Assistant Manager, Cybersecurity Architecture & Governance

SD Guthrie International; Petaling Jaya; On-site; MYR 100,000 - 140,000; Full time

Job summary

A technology solutions provider in Petaling Jaya is searching for an Assistant Manager in Cybersecurity Architecture & Governance. The candidate will oversee cybersecurity architecture standards and governance frameworks, manage cyber risk, and lead analytics and investigation initiatives. Ideal applicants should have 10–12 years of experience in cybersecurity and relevant educational qualifications. Strong communication and vendor management skills are essential for this full-time role.

Qualifications

• Minimum 10–12 years of experience in cybersecurity or information security roles.
• Proven experience in governance and architecture decision-making.
• Strong exposure to cloud security technologies.

Responsibilities

• Govern enterprise cybersecurity architecture standards and frameworks.
• Own and govern the cyber risk management framework.
• Provide oversight for cyber analytics and threat detection capabilities.

Skills

Cybersecurity governance

Risk management

Incident response

Vendor management

Cyber threat analytics

Education

Bachelor's degree in Information Technology or related field

Professional certifications (e.g., CISSP, CISM)

Tools

SIEM/SOC

Security analytics

DLP

Job description

Assistant Manager, Cybersecurity Architecture & Governance page is loaded## Assistant Manager, Cybersecurity Architecture & Governancelocations: Ara Damansara, Selangor, Malaysiatime type: Full timeposted on: Posted 2 Days Agojob requisition id: JR2798We value our people and encourage everyone to grow professionally. If you think this opportunity is right for you, we encourage you to apply!**Job Description:****1. Cybersecurity Architecture Governance, Strategy & Delivery*** Govern enterprise cybersecurity architecture standards, principles, and reference architectures across IT, OT, and cloud environments.* Provide decision authority on security architecture designs, control implementations, and cybersecurity technology selections.* Ensure all-digital, infrastructure, and OT initiatives comply with approved cybersecurity architecture, policies, frameworks, and regulatory requirements.* Lead enterprise cybersecurity initiatives and transformation programs from planning through delivery, ensuring alignment with architecture, risk, and compliance objectives.* Own the evaluation, procurement, deployment, and lifecycle governance of enterprise cybersecurity technologies, not limited to: + Endpoint and network security solutions + Zero Trust Architecture (ZTA) and Secure Access controls + Data Leak / Data Loss Prevention (DLP) + Mobile and Cloud Security platforms* Define and maintain cybersecurity technology standards, configuration baselines, and system hardening requirements.* Provide governance oversight to cross‐functional teams (IT, OT, Operations, Risk, Compliance, Vendors)* Ensure cybersecurity initiatives are delivered within approved scope, timeline, and budget, with appropriate risk management and executive reporting.**2. Cyber Risk Management, Compliance & Assurance*** Own and govern the enterprise cyber risk management framework, including risk identification, assessment, prioritization, treatment, and reporting.* Provide decision authority on cyber risk acceptance, compensating controls, and escalation to senior management.* Ensure timely remediation of high‐risk vulnerabilities, audit findings, and penetration test results.* Oversee compliance with applicable cybersecurity regulations, standards, and frameworks (e.g., ISO 27001, NIST, CIS Controls, GDPR, and local regulatory requirements).* Act as a senior liaison for cybersecurity audits, regulatory inspections, and independent assessments.* Provide executive‐level reporting on cybersecurity risk posture, control effectiveness, and program maturity.* Ensure appropriate documentation, approvals, and audit trails for cybersecurity initiatives and risk decisions.**3. Cyber Analytics, Threat Intelligence & Investigation Oversight*** Provide governance and oversight for enterprise cyber analytics, threat detection, and investigation capabilities.* Oversee the use of SIEM, security analytics, threat intelligence, and monitoring platforms to ensure effective detection of cyber threats and anomalous activities.* Guide and review cybersecurity incident investigations, including root cause analysis, impact assessment, and containment strategies.* Ensure cyber investigations follow approved procedures, legal, regulatory, and evidentiary requirements.* Review investigation outcomes, lessons learned, and corrective actions to strengthen preventive and detective controls.* Coordinate with internal stakeholders (IT, Legal, Risk, HR, Compliance) and external parties where required for major cyber incidents.* Provide executive‐level reporting on significant cyber incidents, investigation outcomes, and risk implications.**4. Leadership, Stakeholder & Vendor Management*** Provide leadership and direction to cybersecurity engineering, operations, analytics, and investigation teams.* Act as a senior cybersecurity advisor to business leaders, technology leadership, and operational teams.* Drive consistent adoption of cybersecurity governance, accountability, and incident response discipline across the organization.* Manage strategic relationships with cybersecurity vendors and Managed Security Service Providers (MSSP).* Monitor vendor performance, SLA, KPI, and service quality, ensuring value realization and risk management.* Champion a strong cybersecurity culture and risk‐aware mindset across IT, OT, and business units.**5. Strategic Planning & Continuous Improvement*** Monitor emerging cyber threats, threat actor trends, regulatory developments, and technology advancements impacting IT, OT, and cloud environments.* Define and maintain the enterprise cybersecurity roadmap aligned with business strategy and digital transformation.* Recommend and lead initiatives to enhance cybersecurity maturity, resilience, detection, investigation, and response effectiveness.* Support long‐term cybersecurity capability planning, investment prioritization, and technology modernization.**Ideal Candidate****Education & Certification*** Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.* Professional certifications are strongly preferred (e.g., CISSP, CISM, CCSP, CISA, ISO 27001 Lead Implementer/Lead Auditor).**Experience*** Minimum 10–12 years of experience in cybersecurity, information security, cyber risk, or incident response roles.* Proven experience in cybersecurity governance, architecture decision‐making, cyber risk management, and project leadership.* Strong exposure to enterprise cybersecurity technologies, including SIEM/SOC, security analytics, EDR, PAM, ZTA, DLP, and cloud security.* Experience overseeing cybersecurity incidents, investigations, and executive‐level reporting.* Experience managing cybersecurity audits, regulatory engagements, and senior stakeholder communication.* Exposure to OT / industrial or plantation environments is a strong advantage.**Core Competencies*** Strong cybersecurity architecture, governance, and risk management expertise.* Solid understanding of cyber threat analytics, incident investigation, and response governance.* Excellent risk‐based decision‐making and executive communication skills.* Ability to lead complex, cross‐functional cybersecurity initiatives.* Strong vendor, budget, and performance management capabilities.* Strategic mindset with practical execution and assurance focus.To apply, please submit your resume and cover letter outlining your interest for this role.