Cybersecurity Lead

DZH International Sdn Bhd; Kuala Lumpur; Hybrid; MYR 200,000 - 360,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Annual leave

Regular staff welfare activities

Job summary

DZH International Sdn Bhd in Kuala Lumpur is seeking a Cybersecurity Lead to drive strategy, governance, and risk management across the enterprise. You will lead incident response, oversee security operations, and collaborate with stakeholders to strengthen cyber resilience for financial services platforms.

The role demands hands-on leadership, cloud security awareness, and a track record of building secure, compliant environments in a fast-paced production setting.

Qualifications

• Degree in Cybersecurity, Information Security, IT Security, or IT Risk related field.
• Minimum 7 years’ relevant experience with leadership or managerial experience preferred.
• Strong experience in governance, operations, vulnerability management, risk assessment, network and infrastructure security, and policy/compliance management.

Responsibilities

• Drive cybersecurity strategy– develop and lead the organisation’s cybersecurity strategy, roadmap, policies, and security standards.
• Strengthen cyber defence– oversee security controls across infrastructure, networks, systems, endpoints, and applications to safeguard business‑critical platforms.
• Manage cyber risks– lead risk assessments, identify vulnerabilities, evaluate threats, and drive remediation plans across the environment.
• Lead incident response– manage cybersecurity incidents from detection to containment, investigation, recovery, and post‑incident review.
• Oversee security operations– ensure effective monitoring, alerting, incident management, and response readiness in collaboration with internal teams and service providers.
• Improve governance & compliance– establish and enhance security policies, procedures, and controls in line with business, regulatory, and audit requirements.
• Protect infrastructure & systems– collaborate with infrastructure, network, and application teams for secure architecture and implementation.
• Manage third‑party security– assess and monitor risks relating to vendors, service providers, and external connections.
• Drive security awareness– promote cybersecurity awareness and best practices across the organisation.
• Engage stakeholders confidently– work with senior management, internal teams, auditors, customers, and external partners.
• Report to leadership– prepare cybersecurity risk updates, incident reports, and security posture presentations for management.
• Lead and mentor the team– guide team members, support capability development, and build a strong cybersecurity function.

Skills

Cybersecurity governance

Security operations

Incident response

Vulnerability management

Risk assessment

Network security

Endpoint security

Security policy

Education

Bachelor's degree in Cybersecurity or related field

Tools

SIEM

SOC operations

Cloud security

Threat detection

Job description

Ready to lead cybersecurity strategy, strengthen cyber resilience, and safeguard mission‑critical systems powering the financial industry? Join us as a Cybersecurity Lead and play a key leadership role in protecting the enterprise technology environment behind our award‑winning trading systems used by leading brokerages and banks across Asia. We’re looking for a strategic and hands‑on cybersecurity leader who can drive security governance, manage cyber risks, strengthen operational resilience, and work closely with internal teams and customers in a fast‑paced production environment.

Work from our Kuala Lumpur office (Menara Worldwide, Bukit Bintang).

Hybrid work options available, after confirmation.

What You’ll Own & Ace

Drive cybersecurity strategy– develop and lead the organisation’s cybersecurity strategy, roadmap, policies, and security standards.

Strengthen cyber defence– oversee security controls across infrastructure, networks, systems, endpoints, and applications to safeguard business‑critical platforms.

Manage cyber risks– lead risk assessments, identify vulnerabilities, evaluate threats, and drive remediation plans across the environment.

Lead incident response– manage cybersecurity incidents from detection to containment, investigation, recovery, and post‑incident review.

Oversee security operations– work with internal teams and service providers to ensure effective monitoring, alerting, incident management, and response readiness.

Improve governance & compliance– establish and enhance security policies, procedures, and controls in line with business, regulatory, and audit requirements.

Protect infrastructure & systems– collaborate with infrastructure, network, and application teams to ensure secure architecture and secure system implementation.

Manage third‑party security– assess and monitor risks relating to vendors, service providers, and external connections.

Drive security awareness– promote cybersecurity awareness and best practices across the organisation to strengthen security culture.

Engage stakeholders confidently– work closely with senior management, internal teams, auditors, customers, and external partners on cybersecurity matters.

Report to leadership– prepare cybersecurity risk updates, incident reports, and security posture presentations for management.

Lead and mentor the team– guide team members, support capability development, and build a strong cybersecurity function.

What You Bring to the Table

Degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.

Minimum 7 years’ relevant working experience in Cybersecurity, Information Security, IT Security, or IT Risk, with leadership or managerial experience preferred.

Strong experience in:

• Cybersecurity governance
• Security operations / incident response
• Vulnerability management
• Risk assessment and remediation
• Network and infrastructure security
• Endpoint and system security
• Security policy and compliance management

Good understanding of cybersecurity frameworks and standards, such as:

• ISO 27001
• NIST
• CIS Controls
• Industry security best practices

Proven ability to manage cybersecurity incidents, coordinate remediation efforts, and work with cross‑functional stakeholders.

Strong communication and stakeholder management skills, with the ability to engage both technical and non‑technical audiences.

Able to work independently, lead initiatives, and drive cybersecurity improvements in a fast‑paced environment.

Willing to provide support during and after office hours for major incidents or critical security events, when required.

Professional certifications such as CISSP, CISM, CISA, CRISC, or equivalent.

Experience in a Financial Services or regulated environment.

Familiarity with cloud security, SIEM, SOC operations, or threat detection technologies.

Experience handling audits, regulatory reviews, or customer security assessments.

Experience building or enhancing enterprise cybersecurity programmes.

Competitive pay & full benefits (medical, annual/birthday/study leave, and more).

Continuous learning: Trainings, team‑building, and new challenges.

Supportive management: Leaders who have your back and listen.

Close‑knit culture: Everyone has a voice; ideas can become reality!

DZH International (DZHI) is Southeast Asia's leading financial data provider offering an integrated consolidated suite of reliable market data, trading execution, in‑depth news and analytical tools. As one of the leading pioneers of real‑time online delivery of equity, futures and commodity market information, DZHl has developed a series of multi‑award winning financial market data analytics products.

DZHI has been delivering unparalleled insights and trading solutions to the institutional and retail investment community for close to 20 years, our clients include major multinational banks and brokerages in Asia. DZHI is a 100% wholly‑owned subsidiary of Shanghai DZH.

Perks and benefits Medical Dental Annual Leave, Regular Staff Welfare Activities etc.