Cyber Security Engineer

IRIS Corporation Berhad; Kuala Lumpur; On-site; MYR 70,000 - 90,000; Full time

Job summary

A leading technology firm in Kuala Lumpur is seeking an experienced Information Security Manager to protect systems and develop robust security plans. You will oversee incident response, educate employees, and ensure compliance with industry standards. A minimum of 4 years in a related field and relevant certifications like CISSP or CISM are required. This role is crucial for safeguarding sensitive information and managing vulnerabilities within the organization.

Qualifications

• Minimum of 4 years’ working experience in information security.
• Relevant IT Security certifications (CISSP, CISM, CEH) are highly desirable.
• Familiarity with NIST and ISO/IEC 27001 security standards.

Responsibilities

• Protect computer systems and networks from threats.
• Develop and maintain Information Security Plans and Policies.
• Educate employees on information security through training programs.
• Conduct quarterly vulnerability scans and bi-annual penetration testing.

Skills

Information security management

Incident response management

Risk assessment

Employee training

Education

Bachelor's Degree in IT or related field

Tools

Intrusion detection systems

Vulnerability scanning tools

Job description

Job Responsibilities

• Protect computer systems and networks from threats and vulnerabilities.
• Develop and maintain Information Security Plans and Policies, with yearly reviews or as needed.
• Create and update hardening checklists based on industry best practices, reviewed annually.
• Plan and execute the organization’s information security strategy.
• Establish security standards and best practices, recommending enhancements to management when required.
• Develop strategies to respond to and recover from security breaches.
• Educate employees on information security through training and awareness programs.
• Implement firewalls and data encryption programs to safeguard sensitive information.
• Assist users with installation and configuration of new security products and procedures.
• Conduct quarterly vulnerability scans of networks.
• Perform bi-annual penetration testing to identify exploitable weaknesses.
• Continuously monitor networks and systems for breaches or irregular behavior using intrusion detection tools.
• Lead incident response activities, including forensic investigations and reporting findings to management.
• Play a hands-on role in security operations when required.
• Manage and optimize contracts and Service Level Agreements (SLAs), ensuring compliance with ISO9001, ISO20001, ISO27001, ISO14298, and PCI standards.
• Provide timely reports to the Head of Unit and Head of Division, ensuring accurate management information.
• Monitor and evaluate emerging technologies for potential adoption.
• Perform any other duties as required by the company.

Job Requirements

• Minimum of 4 years’ working experience in a related field.
• Bachelor’s Degree in IT, Computer Science, Computer Engineering, Information Systems, or equivalent.
• Specific training or certifications in security are an added advantage.
• Familiarity with industry security standards such as NIST and ISO/IEC 27001.
• Relevant IT Security certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are highly desirable.