Department Head, IT Security, Information Technology & Services

Agrobank; Kuala Lumpur; On-site; MYR 300,000 - 520,000; Full time

Job summary

Agrobank seeks a Head of IT Security to define and execute the organization's information security strategy, leading SOC, incident response, and security architecture across production, development, and disaster recovery.

The role oversees IT security operations, vendor relationships, and regulatory compliance, guiding teams to protect digital assets, manage risk, and ensure zero tolerance for cyber incidents in a dynamic banking environment.

Qualifications

• 10–15 years of experience in IT Security Operation and Cyber Security Operation.
• 5–10 years of leadership or management experience in banking system environments with exposure to NIST, ISO27001, GDPR, and related policy/frameworks.
• Experience modernizing and maintaining on-premises and cloud security infrastructure.
• Experience in leasing and purchasing IT security assets.
• Degree in Information Technology, Computer Science, or related field.
• Certifications: CISSP, CISM, or similar.
• Incident response and crisis management; Budget and vendor management; ability to engage senior management and cross‑functional teams.

Responsibilities

• Oversee IT security operations (SOC), incident response, and security architecture across production, development and DR.
• Define IT security strategy and governance, policies, and risk management frameworks.
• Ensure procurement processes, vendor management, and timely project delivery within budget.
• Guide IT security delivery and innovation to protect assets and support business objectives.
• Monitor compliance with regulatory and internal standards and drive continuous improvement.

Skills

IT Security Operation

Cyber Security Operation

Leadership

Budget management

Vendor management

Incident response

CISSP

Education

Degree in Information Technology/Computer Science

CISSP/CISM certification

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

The role encompasses providing comprehensive support to the GITD and Leadership for IT Security department, by offering clear communication and assistance across all IT departmental functions. Responsibilities include ensuring the alignment of IT operations with business strategies, executing IT Technology Strategies, and forecasting IT resource availability for timely solutions within the approved budget.

It involves defining strategies to minimize system security issues for enhanced stability, managing IT costs, overseeing vendor relationships, and supervising the tactical aspects of the IT Transformation Program.

A Head of IT Security (or Head of Cyber Security) defines and executes the organization's information security strategy, leading teams to protect digital assets, manage risks, and ensure regulatory compliance.

He/She will oversee security operations (SOC), incident response, and security architecture while reporting to senior leadership.

He/She will be responsible to manage the IT other security Operation including all IT security devices, IT security system and overall IT security resources.

The incumbent plays a pivotal role in maintaining IT security by assuring adherence to zero trust processes/architecture and implementing robust IT security measures throughout the organization towards zero tolerance of fraud and cyber incidents.

Principal Accountabilities:

Financial Perspective

• a. To ensure initiatives, project and deliverables are utilizing allocated approved OPEX and CAPEX budget prudently and efficiently.
• b. To ensure compliance on procurement process including tender/project award, maintenance renewal activities and payment of invoices.
• c. Manage budgeting, financial control & review services for IT Department.
• d. To advise and assist on IT Technology solution for IT deliverables cost effective manner.

Customer Perspective

• a. Responsible for IT delivery and execution of innovation initiative for Bank’s IT Security in order to improve productivity and customer experiences towards assisting business user on meeting the business objectives.
• b. Responsible for the continuous support of Bank’s IT operation and digital services on meeting productivity standard and customer satisfaction in assisting towards business user on meeting the business objectives.
• c. Oversees the application technology solution with customer focus in mind.

Environment & Community Perspective

• a. Define and strategize IT security deliveries and changes to the systems, hence improving the stability and security of the operation and business environment.
• b. Lead and maintain a conducive working and service environment within Security and IT Department.

Strategic & Operational Perspective

• a. Oversees the Development, update, and maintenance ofIT security Checklist and policy together with other IT teams.
• b. Ensure and advise on the creation and execution of project/RFC work plans/timeline and management of revisions as appropriate to meet changing needs and requirements.
• c. To manage review of deliverables prepared by team to ensure all project goals have been achieved.
• d. Ensure and advise on technical issues and mitigation/action plan.
• e. Ensure important documents including timeline, requirement, test plan, test scripts and sign offs are complete, current, and stored appropriately.
• f. Advise/manage awareness to ensure adherence to Infrastructure policy and procedure.
• g. Lead, manage and supervise overall IT Security operations and IT Cyber Security operations for production, development and DR to ensure zero tolerance to cyber or any IT security incident.
• h. Involvements and responsibility for ensuring and monitoring various project management and reporting tasks related to IT Security.
• i. Responsible for ensuring support and maintenance for IT security systems in production through the enforcement of related ITSM/IT process improvement policies and procedures including management of incidents and problems, issues, maintenance renewal and documentation.
• j. Responsible for ensuring compliance on procurement process including vendor management, tender/project award, maintenance renewal activities and payment of invoices.
• k. Responsible for ensuring adherence to external and internal regulatory, audit and compliance requirements.
• l. Responsible on defining IT security vision, security policies, and risk management frameworks.
• m. Responsible on IT security engineering, security operations (SOC), and incident response, ensuring prompt mitigation of threats.
• n. Responsible on Conducting security audits, risk assessments, and maintain compliance with legal and industry standards.

Qualifications & Skills:

• 10 -15 years of experience in IT Security Operation & Cyber Security Operation.
• 5 -10 years of leadership or management experience in banking system environments with exposure to NIST, ISO27001, GDPR, RMIT and industry best practices policy and framework.
• Experience in Modernization and Maintaining On-Premises and Cloud Security Infrastructure.
• Experience in Managing Leasing and Outright Purchasing of IT Security assets.
• Degree in Information Technology, Computer Science or other relevant major.
• Certifications: requires CISSP, CISM, or similar.
• Incident response and crisis management.
• Budget management and vendor relationship management.
• Ability to elicit cooperation from senior management, clients, and other departments.
• This position requires very minimal supervision from senior management staff and is expected to be performed completely independently using a high level of decision making on a regular basis.