Assistant Manager, IT Security (Head Office, KL)

Lonpac Insurance Bhd; Kuala Lumpur; On-site; MYR 100,000 - 150,000; Full time

Job summary

A prominent insurance company based in Kuala Lumpur is seeking an Assistant Manager, IT Security. The successful candidate will oversee IT security projects, conduct vulnerability assessments, and ensure compliance with IT security policies. Candidates should have 8 to 10 years of experience in IT security, excellent communication skills, and relevant certifications. Attractive remuneration packages will be offered based on qualifications and experience.

Benefits

Attractive remuneration packages

Qualifications

• 8 to 10 years of experience in IT security with a minimum of 4 years in project management.
• Knowledge of IT security methodologies, PCI DSS, and risk management is a plus.
• Familiarity with web-related technologies and database security.

Responsibilities

• Conduct vulnerability assessments and penetration testing.
• Maintain the Security Operations Manual and conduct forensic analysis.
• Design and support cybersecurity architecture for enterprise systems.

Skills

Vulnerability assessment

Penetration testing

Threat hunting

Incident response

Presentation skills

Education

Professional Certificate/Diploma/Degree in Computer Science/IT

Tools

Security certifications (CISSP, CEH)

Job description

Assistant Manager, IT Security (Head Office, KL)

To conduct vulnerability assessment/penetration testing in its skillset and experience to gain access and exploit vulnerabilities in the company’s infrastructure.

To maintain the Security Operations Manual up to date for use by all IT security personnel to cover duties.

To conduct computer forensic analysis and understand the impact on the business.

To research tools, techniques, countermeasures and trends in network vulnerabilities, data hiding, and network security.

Continuous development of threat hunting and proactively identifying security incidents before they occur.

To design and support the overall cybersecurity architecture of the enterprise systems environment

Applying social engineering and phishing techniques to manipulate employees into exposing or revealing information to compromise their machines.

Maintaining standard information security policy, procedure, and documentations.

Monitor identity and access management, including monitoring for abuse of permissions by authorised system users.

Involve in IT Security project management and assist in identifying and evaluating vendor IT security solutions.

To ensure compliance with the provisions of the IT Security Policies and regulatory guidelines.

Job Requirements:-

Professional Certificate/Diploma/Degree in Computer Science/Information Technology or equivalent.

8 to 10 years related experience in IT Security and with proven minimum 4 years working experience in managing IT security projects.

Industry recognized security certifications, such as CISSP, CEH etc. preferred.

Knowledge in IT Security methodology, Bank Negara Guidelines, PCI DSS, Risk Management and IT auditing will be an added advantage.

Technical knowledge of database and operating system security.

Knowledge of network protocol (WAN,LAN) and security concerns within TCP/IP environment.

Thorough understanding of the latest security principles, techniques and protocols.

Familiar with web related technologies.

Ability to present ideas in business-friendly language.

Ability to prioritize, track and manage tasks and action items.

Excellent communication, writing, analytical thinking, strong team player and an individual contributor too.

Attractive remuneration packages which commensurate with qualifications and experience will be offered to the successful candidate. Interested candidates are required to submit their detailed resume stating telephone contact numbers, together with copies of relevant certificates & a recent photograph (n.r.) by applying online or to:

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .