DEPUTY MANAGER, CYBERSECURITY OPERATIONS

KPJ HEALTHCARE BERHAD; Malaysia; On-site; MYR 100,000 - 140,000; Full time

Job summary

KPJ HEALTHCARE BERHAD is seeking a Deputy Manager with strong technical expertise in cybersecurity. This role involves leading network and infrastructure security operations across 30 hospitals, ensuring secure connectivity and effective incident response.

The ideal candidate will have extensive experience in managing firewalls, VPNs, and network segmentation. Qualifications include a relevant Bachelor’s Degree and professional certifications such as CISSP and CCNP Security. The organization values proactive problem-solving in a clinical environment.

Qualifications

• 8–12 years of experience in network, infrastructure, or cybersecurity roles.
• Experience in managing network security controls in enterprise environments.
• Proven incident response capabilities for infrastructure-related threats.

Responsibilities

• Lead network security operations ensuring secure connectivity across hospitals.
• Manage network security posture, including firewalls and VPNs.
• Conduct vulnerability management and secure configuration oversight.

Skills

Technical troubleshooting

Risk translation

Network protocols

Zero Trust principles

Strong documentation skills

Education

Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity

Tools

Firewalls

VPNs

NAC

Cloud security tools

Job description

General Description

A Deputy Manager role with strong technical expertise is required to address a critical capability gap following the departure of a key resource in November and ensure continued effective oversight of SOC and network security operations. As GTS Cyber Security now provides protection for approximately 17,000 staff across 30 hospitals, the scale and complexity of the environment have increased significantly, particularly with the organisation’s expansion into digital platforms and AI-enabled initiatives. This role will provide hands‑on technical leadership in cybersecurity architecture, supporting the validation of security controls, strengthening network and infrastructure security oversight, and enabling timely and effective incident response. The position is essential to ensure cybersecurity operations remain resilient, scalable, and aligned with the organisation’s growth and clinical criticality.

Job Description

• Lead network and infrastructure security operations to ensure resilient, secure, and reliable connectivity across all hospitals and core systems.
• Own and manage the network security posture, including firewalls, network segmentation, VPN, NAC, and related controls.
• Oversee SASE operations, including service delivery performance and management of the resident engineer.
• Lead infrastructure vulnerability and secure configuration management, ensuring timely identification, prioritisation, and remediation of risks.
• Act as the primary escalation point with the SOC for network and infrastructure‑related security incidents.
• Lead incident response activities for infrastructure‑related threats, coordinating containment, recovery, and post‑incident actions.
• Coordinate closely with hospital infrastructure teams to drive remediation and corrective actions.
• Ensure high availability and operational resilience of network and infrastructure services supporting clinical operations.
• Provide cybersecurity input into network and infrastructure architecture design, ensuring security‑by‑design principles are embedded in new and existing environments.
• Participate in IT and digital transformation projects as a cybersecurity representative, reviewing designs, implementation plans, and technical controls.
• Advise project teams on secure network segmentation, connectivity, cloud integration, and resilience considerations.
• Contribute to the development and refinement of cybersecurity strategy and roadmaps, particularly in areas impacting network and infrastructure security.
• Support technology evaluation and solution selection by assessing security implications of new network, infrastructure, and connectivity solutions.
• Collaborate with enterprise architecture and infrastructure teams to align cybersecurity controls with business and operational requirements.

Success Measures

• Reduction in network and infrastructure‑related security incidents and repeat issues.
• Percentage of network segmentation coverage aligned to security standards and criticality.
• Vulnerability and configuration remediation closure rate within defined risk‑based timelines.
• Availability and uptime of critical clinical and business infrastructure services.
• Effectiveness of incident response, measured through response time, containment, and recovery outcomes.

Job Requirements

Education (Preferred, Not Mandatory)

Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Professional Certifications (highly valued)

• Network & Security: CCNP Security, PCNSE, Fortinet NSE, Check Point
• Cybersecurity: CISSP, CISM, CEH
• Cloud security (if relevant): Azure Security Engineer, AWS Security Specialty

Knowledge and Experiences

• 8–12 years of experience in network, infrastructure, or cybersecurity roles, with at least 3–5 years in a lead or senior technical capacity.
• Strong hands‑on experience managing firewalls, VPNs, NAC, and network segmentation in enterprise environments.
• Hybrid infrastructure (on‑prem + cloud), especially in large, distributed environments.
• Proven experience in infrastructure vulnerability management and secure configuration baselines.
• Incident response for network and infrastructure‑related threats.
• Working with SOC teams and managed security services (e.g., SASE, MSSP).
• Experience supporting high‑availability environments (mission‑critical systems).
• Exposure to network architecture design and security‑by‑design principles.
• Large‑scale transformation or migration projects (e.g., cloud, tenant migration, network modernization).

Skills & Competencies

• Strong technical troubleshooting and root cause analysis across network and infrastructure layers.
• Ability to translate security risks into operational and business impact.
• Network protocols, routing, and segmentation strategies.
• Zero Trust, SASE, and modern network security architectures.
• Ability to prioritise remediation based on risk, impact, and operational constraints.
• Strong documentation and reporting skills (incident reports, risk posture, architecture reviews).

Special Skills Required

• Experience in firewalls, SASE, cloud tenants, secure configuration standards – CIS, EDR.

Personal Attributes

• Strong sense of ownership and accountability for critical infrastructure security.
• Calm and decisive under pressure, especially during incidents.
• Practical and solution‑oriented (not overly theoretical).
• Able to balance security vs operational continuity, especially in clinical environments.
• Strong collaboration mindset across technical and non‑technical teams.
• Proactive in identifying risks and driving remediation without constant oversight.
• Continuous learner, keeping up with evolving threats and technologies.