Cybersecurity Lead (Infrastructure)

Ambition; Kuala Lumpur; On-site; MYR 300,000 - 600,000; Full time

Job summary

Ambition in Kuala Lumpur, a regional financial services group, seeks a Cybersecurity Lead (Infrastructure) to own the infrastructure security program in Malaysia.

You will head a security team, define operating models, manage vulnerabilities, ensure PCI DSS compliance, and report to senior leadership on posture and progress.

Qualifications

• 10+ years in IT security with banking/financial services experience.
• Leadership of technical security teams.
• Vulnerability and patch management, secure configuration and controls.
• Hands-on with RMiT, NIST, PCI DSS.
• Translate technical risk into business decisions for leadership.
• Certifications such as CISSP, CISM, CISA or CCSP are advantageous.
• Degree in Computer Science or Information Security.

Responsibilities

• Build and lead a security team; set priorities and grow depth.
• Define the security operating model, governance routines and controls.
• Run a risk-based vulnerability programme; assess exposure and drive fixes.
• Ensure patching timelines and risk acceptance are documented.
• Keep hardening standards and access controls current across platforms.
• Own card data security for the infrastructure layer and readiness.
• Track findings and remediation to closure; escalate material risks.
• Use automation to improve controls, monitoring and reporting.
• Report infrastructure risk posture and metrics to senior management.

Skills

IT security leadership

Banking/financial services

Vulnerability management

Security controls (on-prem & cloud)

Business risk translation

Security governance & standards

Education

Bachelor's degree in Computer Science / Information Security

Tools

RMiT

NIST

PCI DSS

Job description

Cybersecurity Lead (Infrastructure) | Kuala Lumpur

About the client?

Our client is a well-established regional financial services group with operations across several Southeast Asian markets. As part of a push to strengthen its technology risk posture, it is hiring a senior leader to own infrastructure security in Malaysia. You will head a team of security specialists and set the standard for how risk is managed across in a closely regulated industry.

The Role

You will own the infrastructure security agenda end to end, from setting standards and running controls through to remediation and reporting to leadership. Key responsibilities include:

• Building and leading a capable team of security specialists, setting priorities and growing their technical depth
• Defining the operating model for security, including procedures, control frameworks and governance routines
• Running a risk-based vulnerability programme: assessing exposure, prioritising what matters, driving fixes and escalating where needed
• Holding technology owners accountable for patching performance, including timelines, exceptions and formal risk acceptance
• Keeping hardening standards and network access rules current, justified and consistently applied across all platforms
• Owning card data security compliance for the infrastructure layer, from control design to assessment readiness
• Tracking security findings and remediation commitments to closure, and raising material or overdue risks early
• Using automation to make controls, monitoring and reporting faster and more reliable
• Reporting on infrastructure risk posture, compliance status and performance metrics to senior management and governance committees

What We're Looking For

You'll bring:

• 10+ years in IT security, with a strong security background in banking, insurance or financial services
• A track record of leading and developing technical security teams
• Deep knowledge of vulnerability and patch management, secure configuration and security controls across on-premise and cloud
• Solid hands-on experience with RMiT, NIST, PCI DSS.
• The ability to translate technical risk into clear business decisions for senior stakeholders
• Certifications such as CISSP, CISM, CISA or CCSP (an advantage)
• A degree in Computer Science, Information Security or a related field

JTK Number: JTKSM 995 | Company Registration Number: 201301019088 (1048918-T)