Cybersecurity Assurance & Vulnerability Specialist

Air Selangor; Kuala Lumpur; On-site; MYR 90,000 - 120,000; Full time

Job summary

Air Selangor is seeking a cybersecurity professional to support vulnerability management, testing, and assurance activities. The role emphasizes coordinating assessments, validating control effectiveness, and driving remediation across IT and OT domains.

You will work with Infrastructure, Network, Cloud, and third-party service providers to strengthen the organization’s security posture and resilience, while reporting to management and stakeholders.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field.
• 3–7 years of relevant cybersecurity experience.
• Strong interpersonal and communication skills.
• Problem solving and analytical thinking to address security issues.
• Ability to collaborate across teams and stakeholders.
• Familiarity with vulnerability management, testing, and remediation.

Responsibilities

• Conduct and coordinate vulnerability assessments and penetration testing.
• Review findings, assess risk, and track remediation progress.
• Support cybersecurity assessments of systems and processes.
• Validate control implementation and reporting of metrics.
• Coordinate cyber resilience testing and drills.
• Prepare management reports and dashboards on security posture.
• Collaborate with Infrastructure, Network, Cloud, OT, and third parties.

Skills

Vulnerability management

Penetration testing

Cybersecurity assessments

Control validation

Remediation management

OT awareness

Interpersonal skills

Problem solving

Communication

Listening

Public relations

Collaboration

Education

Bachelor’s degree in Cybersecurity/IT or related field

Job description

Air Selangor is seeking a cybersecurity professional to support vulnerability management, testing, and assurance activities. The role emphasizes coordinating assessments, validating control effectiveness, and driving remediation across IT and OT domains.

You will work with Infrastructure, Network, Cloud, and third-party service providers to strengthen the organization’s security posture and resilience, while reporting to management and stakeholders.