Cybersecurity Manager

Flintex Consulting Pte Ltd; Kuala Lumpur; On-site; MYR 179,000 - 223,000; Full time

Job summary

Flintex Consulting Pte Ltd in Kuala Lumpur is seeking an experienced Cybersecurity Manager to lead and govern the organization's cybersecurity posture across infrastructure, cloud, applications and endpoints for a Singapore-based financial institution.

The role focuses on enterprise cybersecurity strategy, threat defense, security operations, governance, and risk management in a highly regulated environment, requiring hands-on technical expertise combined with strong leadership.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field.
• 8–12 years of progressive cybersecurity experience, including 3–5 years in a managerial role.
• Experience in financial services or other highly regulated industries within Singapore or APAC.

Responsibilities

• Develop and execute enterprise cybersecurity strategy aligned with business objectives and MAS TRM requirements.
• Establish defense-in-depth and zero-trust architecture across enterprise environments.
• Drive cybersecurity governance, standards, policies, and procedures for infrastructure, cloud, apps and users.
• Lead cyber risk assessments, threat modeling, and security reviews for initiatives and digital transformation.
• Oversee SOC functions, threat monitoring, incident response, and cyber resilience activities.
• Manage cloud security governance and controls, especially for AWS environments and IAM.

Skills

Cybersecurity Management

Security Operations

Threat Detection

Regulatory Compliance

Leadership

Education

Bachelor's degree in Cybersecurity or related field

Tools

SIEM

EDR/XDR

WAF

DLP

CASB

IAM/PAM

Job description

Full time | Flintex Consulting Pte Ltd | Malaysia

Posted On 07/09/2026

Job Information

Work Experience 5+ years

Technology

MYR 16000 - MYR 20000

City Kuala Lumpur

State/Province Wilayah Persekutuan Kuala Lumpur

Job Description

About the Role

We are seeking an experienced Cybersecurity Manager to lead, govern, and continuously enhance the organization's cybersecurity posture across infrastructure, cloud, applications, endpoints, and digital platforms for a Singapore-based financial institution.

This role focuses on enterprise cybersecurity strategy, threat defense, security operations, governance, and technology risk management. The ideal candidate will combine hands-on technical cybersecurity expertise with leadership capabilities to drive cyber resilience, regulatory compliance, secure digital transformation, and proactive threat management in a highly regulated environment.

Key Responsibilities

Cybersecurity Strategy & Governance

• Develop and execute the enterprise cybersecurity strategy aligned with business objectives, MAS TRM requirements, and industry best practices.
• Establish and maintain a defense-in-depth and zero-trust security architecture across enterprise environments.
• Drive cybersecurity governance, standards, policies, and operational procedures across infrastructure, cloud, applications, and user environments.
• Lead cyber risk assessments, threat modeling, and security reviews for technology initiatives and digital transformation projects.
• Ensure cybersecurity considerations are embedded into system design, application development, and operational processes using Secure-by-Design principles.

Security Operations & Threat Management

• Oversee SOC functions, threat monitoring, incident detection, response coordination, and cyber resilience activities.
• Lead incident response activities including containment, eradication, recovery, forensic investigations, and post-incident reviews.
• Implement and enhance threat detection capabilities using SIEM, EDR/XDR, UEBA, threat intelligence, and security analytics platforms.
• Drive continuous improvement in security monitoring, automation, alert tuning, and operational efficiency.
• Manage vulnerability management lifecycle activities including assessments, penetration testing, remediation tracking, and reporting.
• Lead security architecture and operational security for enterprise infrastructure including networks, servers, endpoints, virtualization platforms, and cloud environments.
• Oversee cloud security governance and controls, particularly for AWS environments including IAM, GuardDuty, Security Hub, encryption, logging, and workload protection.
• Ensure effective implementation and management of EDR/XDR, WAF and API security, CASB/SASE/ZTNA, DLP, email and web security gateways, DNS and network security controls, FIM, next-generation firewalls, and IPS/IDS.
• Collaborate with Infrastructure, DevOps, and Application teams to integrate security into CI/CD pipelines and Infrastructure-as-Code processes.

Regulatory Compliance & Risk Management

• Ensure compliance with MAS Technology Risk Management Guidelines, MAS Cyber Hygiene Notices, PDPA requirements, and internal cybersecurity policies and standards.
• Act as the primary cybersecurity liaison for Internal Audit, External Audit, Risk, and Compliance functions.
• Coordinate cybersecurity assessments, audits, regulatory reviews, and remediation programs.
• Support business continuity planning, disaster recovery exercises, and cyber crisis simulations.

Vendor & Security Service Management

• Manage relationships with cybersecurity vendors, MSSPs, cloud providers, and technology partners.
• Evaluate and implement modern cybersecurity technologies and services aligned with organizational risk appetite.
• Manage cybersecurity contracts, renewals, service reviews, SLAs, and operational performance.
• Prepare and manage cybersecurity budgets, including CAPEX/OPEX planning, investment forecasting, and cost optimization.

Leadership & Stakeholder Management

• Lead and mentor cybersecurity engineers, analysts, and operational teams.
• Build cybersecurity awareness and promote strong cyber hygiene practices across the organization.
• Provide regular cybersecurity reporting and risk updates to senior management and governance committees.
• Translate technical cyber risks into clear business impacts and actionable recommendations.
• Drive continuous cybersecurity maturity improvements across people, processes, and technology.

Education & Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related discipline.
• 8-12 years of progressive cybersecurity experience, including at least 3-5 years in a managerial or leadership role.
• Proven experience in financial services, banking, insurance, or other highly regulated industries within Singapore or APAC.

Technical Expertise

• Strong expertise across Security Operations, Incident Response, Threat Detection, Threat Intelligence, AWS Cloud Security, Infrastructure Security, Network Security, Endpoint Security, EDR/XDR, SIEM, IAM/PAM, DLP, Vulnerability Management, Application Security, DevSecOps, Security Architecture, and Zero Trust.
• Strong knowledge of Windows/Linux hardening, cloud-native security controls, and enterprise security tooling.
• Hands-on experience with SIEM, WAF, EDR, DLP, CASB, email security, and modern security monitoring platforms.
• Experience with automation, scripting, and security orchestration technologies is advantageous.
• Familiarity with AI/LLM security governance, data protection controls, and cloud-native AI security practices is an added advantage.

Regulatory & Governance Knowledge

• Strong understanding of MAS TRM Guidelines, Cyber Hygiene requirements, ISO 27001, NIST Cybersecurity Framework, CIS Controls, and PDPA.
• Experience managing audits, security assessments, and regulatory remediation programs.

Soft Skills

• Strong leadership and people management skills.
• Excellent stakeholder engagement and communication abilities.
• Strong analytical thinking and problem-solving capabilities.
• Ability to operate effectively under pressure during cybersecurity incidents and crisis situations.
• Structured, proactive, and process-driven mindset.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CCSP, GIAC, or AWS Certified Security - Specialty.
• Experience with DevSecOps, security automation and SOAR, Infrastructure-as-Code security, AI Security or GenAI Governance, threat hunting, and adversarial simulation.
• Familiarity with modern enterprise security frameworks and zero-trust architecture principle