Executive, IT Network & Security

Takaful IKHLAS; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Takaful Ikhlas Family Berhad, Malaysia, is seeking an IT Security Executive to implement and maintain information security controls across the Group’s IT environment. You will safeguard assets with security monitoring, incident response, and vulnerability management, working with ICT teams and external service providers.

role focuses on regulatory compliance, policy maintenance, user awareness, and risk assessments to support robust cybersecurity objectives for the organization.

Qualifications

• Bachelor's degree in cybersecurity, information security, IT, computer science, computer engineering, or related field.
• Minimum 3 years of experience in information security, cybersecurity operations, security administration, IT infrastructure security, or related areas.
• Certifications such as CISSP, CISM, SC-900, SC-200, or ISACA Cybersecurity Fundamentals are advantageous.

Responsibilities

• Monitor and support security infrastructure (firewalls, endpoint protection, email security, web security, SIEM, access management).
• Analyze security alerts, events and logs for threats or suspicious activity.
• Lead/assist in cybersecurity incident detection, investigation, and response.
• Support vulnerability assessments, security scans, and remediation activities.
• Assist in governing and maintaining security policies, standards and procedures.
• Support access reviews and identity governance activities.
• Participate in security awareness and training initiatives.
• Coordinate with vendors and internal stakeholders on security matters and remediation.
• Prepare security reports and maintain documentation on configurations and incidents.
• Assist in audits and regulatory reviews from an information security perspective.

Skills

Cybersecurity concepts

Network security

Endpoint security

SIEM

Log analysis

Identity & access management

Vulnerability management

Threat detection

Communication skills

Problem solving

Education

Bachelor's Degree in Cybersecurity or related field

Tools

Firewalls

Endpoint security

Email security

SIEM

Access management

Cloud security tools

Vulnerability scanners

Job description

Takaful Ikhlas Berhad is renamed to Takaful Ikhlas Family Berhad (Takaful IKHLAS Family) and manages the family takaful business. Its general takaful business is being managed by a new entity, Takaful Ikhlas General Berhad (Takaful IKHLAS General).

Takaful IKHLAS offers a comprehensive range of family and general takaful products. Its distribution channels comprise of highly knowledgeable and well-trained agents, brokers, financial institutions, motor franchise holders and cooperatives. Takaful IKHLAS has 13 branch offices and currently records around 2 million registered certificate (policy) holders and more than 5,000 agents.

Both Takaful IKHLAS Family and Takaful IKHLAS General are wholly owned subsidiaries of MNRB Holdings Berhad.

JOB PURPOSE

The IT Security Executive is responsible for supporting the implementation, operation, monitoring, and maintenance of the Group's information security controls and cybersecurity initiatives to ensure the confidentiality, integrity, and availability of information assets.

The role assists in safeguarding the organization's IT infrastructure, applications, and data

against cyber threats through security monitoring, incident response, vulnerability management,

and compliance activities. The incumbent will work closely with internal ICT teams and external

service providers to ensure security controls are effective, compliant with regulatory requirements, and aligned with the Group's cybersecurity objectives

JOB RESPONSIBILITIES

• Monitor and support the administration of the Group's security infrastructure, including firewalls, endpoint protection, email security, web security solutions, SIEM, and access management systems.
• Monitor security alerts, events, and logs to identify potential threats, vulnerabilities, or suspicious activities.
• Perform initial investigation, analysis, and escalation of cybersecurity incidents in accordance with established incident response procedures.
• Support vulnerability assessments, security scans, and remediation activities across servers, endpoints, network devices, and applications.
• Assist in the implementation and maintenance of security controls, policies, standards, and procedures.
• Support user access reviews, privileged access management, and identity governance activities.
• Participate in cybersecurity awareness and user education initiatives across the organization.
• Assist in conducting security risk assessments and security reviews for systems, projects, and third-party services.
• Coordinate with internal stakeholders and external vendors on security-related matters, incident investigations, and remediation activities.
• Support compliance initiatives relating to information security, regulatory requirements, and internal governance standards.
• Maintain documentation relating to security configurations, incidents, vulnerabilities, risk assessments, and operational procedures.
• Assist in the review and maintenance of cybersecurity policies, standards, guidelines, and controls.
• Support audits, regulatory reviews, and security assessments conducted by internal and external parties.
• Participate in disaster recovery and business continuity exercises from an informationsecurity perspective.
• Prepare periodic security reports, including incidents, vulnerabilities, compliance status,and security improvement initiatives.
• Stay updated on emerging cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
• Support after-office-hours activities and incident response activities when required

QUALIFICATION & EXPERIENCE

• Bachelor's Degree in Cybersecurity, Information Security, Information Technology, Computer Science, Computer Engineering, or a related fieldProfessional

The following certifications will be an added advantage:

• Certified Information Systems Security Professional (CISSP) Associate

• Certified Information Security Manager (CISM) Associate

• Microsoft Security, Compliance, and Identity Fundamentals (SC-900)

• Microsoft Security Operations Analyst (SC-200)

• ISACA Cybersecurity Fundamentals Certificate

Experience

• Minimum 3 years of working experience in information security, cybersecurity operations, security administration, IT infrastructure security, or related areas.
• Experience in monitoring and managing security technologies such as firewalls, endpointsecurity, email security, SIEM, and access management solutions.
• Basic hands-on experience in cybersecurity incident detection, response, andinvestigation.
• Experience performing vulnerability assessments, security reviews, or remediationactivities.
• Familiarity with cybersecurity frameworks, standards, and security best practices.
• Experience working with vendors, managed security service providers (MSSPs), andexternal security partners.
• Exposure to cloud security, regulatory compliance, or cybersecurity governance wouldbe an added advantage

TECHNICAL COMPETENCIES REQUIRED

• Good understanding of cybersecurity concepts, principles, and best practices.
• Basic knowledge of network security, endpoint security, identity and accessmanagement, and data protection controls.
• Familiarity with security monitoring tools, SIEM platforms, and log analysis.
• Understanding of common cyber threats, malware, phishing, ransomware, and attack methodologies
• Knowledge of vulnerability management and remediation processes.
• Understanding of security governance, risk management, and compliance requirements.
• Familiarity with cloud security concepts (Microsoft Azure, Microsoft 365, AWS, or equivalent) would be an added advantage.
• Strong analytical and problem-solving skills.
• Good written and verbal communication skills.
• Ability to work independently and collaboratively in a team environment.
• Good documentation and reporting skills.
• Customer-oriented mindset with strong service delivery focus.
• High level of integrity and awareness of information confidentiality