Cybersecurity Manager – Critical Infrastructure

Malaysia Rapid Transit Corporation Sdn. Bhd.; Penang; On-site; MYR 180,000 - 240,000; Full time

Job summary

Malaysia Rapid Transit Corporation Sdn. Bhd. is seeking an experienced Cybersecurity Manager to lead security across Penang Mutiara Line's digital and OT environments.

You will establish secure architectures, manage risks and incidents, and ensure vendor solutions meet security requirements. The role combines strategic direction with hands-on technical assurance, requiring strong communication with senior stakeholders, system contractors and multidisciplinary teams on critical infrastructure

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering or related discipline.
• Experience across both corporate IT and Industrial Control System/Operational Technology environments.
• Experience in regulated/critical-infrastructure environments (public transport, utilities, oil & gas, telecommunications, government).
• CISSP, CISM or equivalent certifications are advantageous.
• Strong technical judgement and ability to engage with senior stakeholders and contractors.

Responsibilities

• Lead cybersecurity requirements, governance and technical assurance across project systems.
• Establish secure network and system architecture; oversee security segregation between networks.
• Manage cybersecurity risks, vulnerabilities and incidents; coordinate vulnerability assessments and pen testing.
• Ensure vendor/contractor solutions meet project and regulatory security requirements.
• Support system integration, testing, commissioning, and operational readiness with contractors and stakeholders.

Skills

Cybersecurity

Security governance

Incident management

Stakeholder communication

Education

Bachelor's degree (Cybersecurity/CS/Engineering)

Job description

Cybersecurity Manager – Critical Infrastructure

About the role
MRT Corp is seeking an experienced Cybersecurity Manager to support the delivery of the Penang Mutiara Line. This role will lead cybersecurity across the project’s digital and operational technology environment, providing both strategic direction and hands‑on technical assurance across critical railway infrastructure.

What you will do
Lead cybersecurity requirements, governance and technical assurance across project systems; establish secure network and system architecture; oversee security segregation between corporate, public and operational networks; manage cybersecurity risks, vulnerabilities and incidents; coordinate vulnerability assessments and penetration testing; and ensure vendor and contractor solutions meet project and regulatory security requirements. Support system integration, testing, commissioning, trial running and operational readiness while working closely with system contractors, consultants and multidisciplinary project stakeholders.

Environment
The environment includes critical systems such as Communications-Based Train Control (CBTC), Supervisory Control and Data Acquisition (SCADA), Computerised Maintenance Management Systems (CMMS) and other connected critical infrastructure.

What we are looking for

A bachelor’s degree in Cybersecurity, Computer Science, Engineering or a related discipline, with substantial cybersecurity experience and proven exposure across both corporate IT and Industrial Control System / Operational Technology environments.

Experience in public transport, airports, utilities, oil & gas, telecommunications, government infrastructure or another regulated / critical-infrastructure environment is particularly relevant.

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or other recognised security certifications are advantageous.

Strong technical judgement, clear communication and the ability to work credibly with senior stakeholders, contractors and specialist technical teams are essential.

Note: This position is offered on a 2-year fixed-term contract, with competitive benefits and an option for renewal based on performance.

MRT Corp was established in 2011 and is fully owned by the Minister of Finance (Incorporated). In 2017, MRT Corp successfully delivered the country’s first MRT line, MRT Kajang Line. This is followed by the MRT Putrajaya Line which was successfully delivered in 2023.

MRT Corp has also been appointed as the Malaysian InfraCo for the Rapid Transit System (RTS) Link Project between Johor Bahru and Singapore. The full opening of the line is targeted to be on 31 December 2026.

MRT Corp also plans and designs future metro rail networks and strive to be the catalyst in urban socio-economic regeneration by way of inclusive metro rail transport system and development of transit-oriented communities

MRT Corp was established in 2011 and is fully owned by the Minister of Finance (Incorporated). In 2017, MRT Corp successfully delivered the country’s first MRT line, MRT Kajang Line. This is followed by the MRT Putrajaya Line which was successfully delivered in 2023.

MRT Corp has also been appointed as the Malaysian InfraCo for the Rapid Transit System (RTS) Link Project between Johor Bahru and Singapore. The full opening of the line is targeted to be on 31 December 2026.

MRT Corp also plans and designs future metro rail networks and strive to be the catalyst in urban socio-economic regeneration by way of inclusive metro rail transport system and development of transit-oriented communities

Researching careers? Find all the information and tips you need on career advice.