Cyber Security Manager (Executive Level)

MSC Trustgate.com Sdn Bhd; Sepang; On-site; MYR 80,000 - 120,000; Full time

Job summary

A leading cybersecurity provider in Malaysia is seeking a Cyber Security Manager to lead the development and implementation of information security policies. This role involves overseeing compliance with security controls and managing internal assessments. Ideal candidates will have strong expertise in cybersecurity and at least 3 years in a senior security role. The position offers a critical opportunity to enhance the organization's overall security posture while guiding technical teams on best practices.

Qualifications

• Strong subject matter expertise in cybersecurity and compliance frameworks.
• Proven experience in developing and managing security policies.
• Minimum 3+ years of experience in cybersecurity roles.

Responsibilities

• Lead development of information security policies and standards.
• Oversee compliance with security controls and regulatory requirements.
• Manage internal and external security assessments and audits.

Skills

Cybersecurity expertise

Risk management

Compliance frameworks

Security assessments

Education

Bachelor's degree in Computer Science or related field

Job description

Cyber Security Manager (Executive Level)

MSC Trustgate.com Sdn Bhd – Sepang, Selangor

Lead the development, implementation, and continuous improvement of information security policies, technical standards, and security guidelines across the organization.

Oversee and evaluate compliance with security controls, regulatory requirements, and internal security standards.

Provide strategic and practical guidance to technical teams on the effective implementation of security controls and security-by-design principles.

Manage and support internal and external security assessments, audits, and regulatory reviews.

Identify, assess, and manage information security risks, including the development and execution of risk mitigation strategies.

Communicate security posture and residual risks to senior management and stakeholders through clear, executive-level reporting and presentations.

Review and enhance Governance, Risk, and Compliance (GRC) processes to improve efficiency, effectiveness, and regulatory alignment.

Oversee the security, stability, and availability of IT systems and infrastructure, ensuring the protection of business-critical systems and business continuity.

Ensure ongoing risk assessments for IT infrastructure, systems, and processes, and maintain compliance with applicable standards, practices, and guidelines (e.g. ISMS, GPIS).

Ensure timely escalation and reporting of any breaches of law, regulation, company policies, or code of conduct to relevant authorities and management.

Establish, maintain, and continuously improve the organization’s Information Security Management System (ISMS).

Required education and experience

Strong subject matter expertise in cybersecurity, compliance frameworks, privacy controls, and security best practices (e.g. WebTrust Principles and Criteria for CAs, ISO/IEC 27001 ISMS, SOC 2, CIS Controls).

Proven experience in developing, managing, and enforcing enterprise-wide information security policies, standards, and guidelines.

Demonstrated experience in security assessments, audits, risk management, and risk mitigation at an organizational level.

Strong technical understanding of security controls, including their intent and implementation within complex enterprise IT environments.

Bachelor’s degree in Computer Science, Information Technology, or a related technical field, or equivalent professional experience.

Minimum 3+ years of experience in information security or cybersecurity roles, preferably in a managerial or senior capacity.