Associate Executive, Secure Configuration Management, Cyber Security

Bank Negara Malaysia; Kuala Lumpur; On-site; MYR 60,000 - 80,000; Full time

Job summary

A leading financial institution in Kuala Lumpur is seeking an Associate Executive for Secure Configuration Management within Cyber Security. This role requires executing secure configuration processes, administering tools, and conducting research and development to enhance security practices. Candidates should have a degree in Computer Science or related field and at least 2 years of experience in technical infrastructure and cybersecurity. Benefits include EPF, SOCSO, and annual leaves.

Benefits

EPF

SOCSO

Annual Leaves

Qualifications

• At least 2 years working experience with strong knowledge in technical infrastructure.
• IT technical certifications in relevant domains are an added advantage.
• Familiarity with secure configuration management tools is essential.

Responsibilities

• Execute and operationalize secure configuration management processes.
• Administer and support secure configuration management tools.
• Perform R&D on secure configuration management tools and processes.
• Build relationships with external IT security experts and organizations.

Skills

Technical knowledge in cybersecurity

Experience with Ansible

Knowledge of AWS Security Hub

Experience with cloud technologies

Working experience with databases

Education

Degree in Computer Science / Information Technology

Tools

Puppet

Tenable

Qualys

Terraform

Job description

Associate Executive, Secure Configuration Management, Cyber Security

Qualifications

• Academic qualifications: Degree in Computer Science / Information Technology or its equivalent.
• IT technical certifications in operating system systems, networking, databases, and any certification in cyber security such as CISSP, CISA is an added advantage.
• Technical knowledge and working experience with operating system, network device, databases, middleware administration, cloud, configuration deployment, enforcement and validation tools such as Ansible, Puppet, Tripwire, Change Tracker, Qualys, Tenable, AWS Security Hub, Azure Defender, Google SCC Cloud Security Posture Management, TerraForm, CSPM, CNAPP or IaaC scripting.
• Experience: At least 2 years working experience with strong knowledge in technical infrastructure and cloud technologies and cybersecurity technologies, implementation and maintenance.

Responsibilities

• Execute and operationalize secure configuration management processes in terms development, enhancement, enforcement, and validation of secure configuration baselines and reporting its compliance to the management, through collaboration with various team from security architecture, administration, and operation, technical infrastructure, application management, cloud management, and technology governance teams.
• Execute, administer and support secure configuration management tools (or its equivalences) that enable secure configuration management processes in terms of its system / tools lifecycle to ensure adherence to the technology architecture design, standards and principles, and deliver the intended security objectives without resulting in major impact to IT operational performance.
• Perform research and development and/or enhancement on new secure configuration management process, tools, and its baselines, risks and threats and assess whether it is relevant and continuously effective to meet the Bank's security objectives and assessment, and work with relevant security and technical team to develop remediation and/or mitigation plan to address any non-compliance or deviation from secure baselines.
• Build and maintain strategic and technical relationship/networking and collaborations with external IT security experts, IT security technology principal and providers and other IT organizations in order to benchmark and improve the Bank’s IT security service delivery to the stakeholders.

Benefits

• EPF
• SOCSO
• Annual Leaves