Cyber Risk Management Specialist (Assistant Manager)

gradmalaysia.com; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

A leading tech organization in Kuala Lumpur seeks a Cybersecurity Professional to manage and oversee daily cybersecurity risk functions. Responsibilities include collaboration with IT operations to enforce security controls, conducting risk assessments, and reporting on emerging security threats. The ideal candidate will have at least 3 years of experience in IT security and a degree in Cybersecurity or related field, along with a proactive mindset to address cyber risks.

Qualifications

• Possess at least 3 years of work experience in security assessment and enforcement or implementation of IT security controls.
• Possess professional certification in information security, governance, and risk management will be an advantage.
• Familiarity with cybersecurity threats and risk metrics.

Responsibilities

• Manage day to day cybersecurity risk functions.
• Collaborate with IT operations to enforce IT security controls.
• Govern and oversee cyber risk management activities.

Skills

Cybersecurity risk management

Threat analysis

IT security controls

Risk assessment

Communication skills

Education

Degree in Cybersecurity or Information Technology

Job description

• Manage day to day cybersecurity risk functions.
• Collaborate with IT operations to enforce IT security controls. Ensure that IT security controls are adequate, appropriate and effective.
• Actively participates in regular meetings with project team, IT operations and other business units to address IT security matters.
• Govern and oversee cyber risk management activities to ensure compliance with regulatory requirements and internal policies.
• Communicate the results of risk assessment to governance and working committees.
• Proactively measure cybersecurity threats and risk metrics to mitigate current and emerging risk events.
• Provide detailed reports and briefings to leadership on emerging threats and security incidents.
• Conduct cyber risk assessments for projects and ad-hoc initiatives to identify, evaluate, and mitigate security risks
• Conduct phishing simulation test and cyber drill exercise.
• Monitor and analyze cybersecurity threats, vulnerabilities and attack trends.

Qualification/Requirements

• Degree in Cybersecurity, Information Technology or equivalent IT discipline.
• Possess at least 3 years of work experience in security assessment and enforcement or implementation of IT security controls.
• Possess professional certification in the field of information security, governance and risk management will be an advantage.