Director, Cybersecurity & Risk Management

Hireon; Kuching; Vor Ort; MYR 150.000 - 300.000; Vollzeit

Zusammenfassung

Hireon in Malaysia invites an experienced cybersecurity leader to head the information security, risk and compliance functions. You will develop strategy, governance frameworks and long-term security roadmaps while overseeing SOC operations, SIEM, EDR, DLP, firewalls and vulnerability management.

You will lead enterprise risk assessments, maintain risk registers, serve as Incident Response Lead during security events, and report to the board with security metrics.

Qualifikationen

• 5+ years of cybersecurity, GRC or information security experience, incl. 2+ years in leadership.
• Strong knowledge of ISO 27001, NIST, COBIT, governance, risk management and compliance.
• Hands-on with SIEM/EDR/DLP, firewalls and vulnerability management.
• Certifications such as CISSP, CISM, CISA, CRISC or equivalent are desirable.

Aufgaben

• Lead and manage cybersecurity, information security, risk, and compliance functions.
• Develop and implement cybersecurity strategy, governance frameworks, and roadmaps.
• Oversee security operations including SIEM, EDR, DLP, firewalls, and incident response.
• Lead enterprise-wide IT risk assessments and maintain risk registers.
• Serve as Incident Response Lead during cybersecurity incidents and breaches.
• Develop, implement, and review policies, standards, and governance controls.
• Manage compliance with ISO 27001, NIST, COBIT, and PDPA.
• Prepare board-level reports, security metrics and risk updates.
• Manage budgets, vendors, contracts, and team performance.
• Promote a security-conscious culture through awareness initiatives.

Kenntnisse

Leadership

Governance

Risk management

Stakeholder engagement

Strategic planning

Incident response

Ausbildung

Bachelor's in Computer Science or related

Tools

SIEM

EDR

DLP

Firewalls

Vulnerability management

Incident response

Jobbeschreibung

Hireon in Malaysia invites an experienced cybersecurity leader to head the information security, risk and compliance functions. You will develop strategy, governance frameworks and long-term security roadmaps while overseeing SOC operations, SIEM, EDR, DLP, firewalls and vulnerability management.

You will lead enterprise risk assessments, maintain risk registers, serve as Incident Response Lead during security events, and report to the board with security metrics.