Head, Digital & Technology Security

Port of Tanjung Pelepas; Gelang Patah; On-site; MYR 500,000 - 900,000; Full time

Job summary

Port of Tanjung Pelepas seeks an experienced cybersecurity leader to strengthen its Digital & Technology Security across enterprise and OT environments. This strategic role shapes cybersecurity direction, governance, risk management and resilience to support ongoing digitalization of a complex port operation.

Responsibilities include developing the enterprise security strategy, governing risk across IT/OT, leading GRC activities, and guiding security architecture for major projects.

Qualifications

• Bachelor's degree in a cybersecurity, information security, computer science or related discipline.
• Typically 12–15 years of progressive cybersecurity or technology risk leadership exposure.
• Proven experience in strategy, governance, architecture, risk, compliance and resilience.
• Exposure to enterprise IT, OT/ICS, critical infrastructure, ports, maritime or similar environments.
• Experience engaging with senior management, auditors and regulators.

Responsibilities

• Develop and drive enterprise cybersecurity strategy, governance framework and multi-year roadmaps.
• Oversee cybersecurity risks across IT, OT, cloud, data, networks, automation and applications.
• Establish policies, standards, risk registers and compliance processes.
• Lead GRC activities including audits, remediation and third-party assessments.
• Define security architecture and security-by-design requirements for major projects.
• Strengthen cyber resilience and incident preparedness, recovery capabilities and crisis response.
• Provide executive direction during major cybersecurity incidents.
• Translate emerging threats into practical security priorities for ports and logistics.
• Drive transformation initiatives such as Zero Trust, AI-enabled security and OT security.
• Establish security metrics, maturity assessments and executive reporting.
• Develop internal capability and manage partners, budgets and suppliers.
• Engage with senior management, auditors, regulators and industry stakeholders.

Skills

Leadership

Cybersecurity Strategy

Governance & GRC

Risk Management

Executive Communication

Education

Bachelor's Degree in Cybersecurity or related

Job description

We are looking for an experienced cybersecurity leader to lead and strengthen PTP’s Digital & Technology Security capabilities across our enterprise and operational technology environments.

This is a strategic leadership role responsible for shaping PTP’s cybersecurity direction, governance, risk management and resilience while supporting the continued digitalization of a complex, business-critical port environment.

Key Responsibilities

• Develop and drive PTP’s enterprise cybersecurity strategy, governance framework and multi-year security roadmap.
• Provide oversight of cybersecurity risks across IT, Operational Technology (OT), cloud, applications, data, networks, automation and other critical technology environments.
• Establish and govern cybersecurity policies, standards, risk registers, compliance requirements and risk-acceptance processes.
• Lead cybersecurity governance, risk and compliance (GRC) activities, including audit assurance, remediation and third-party security assessments.
• Define enterprise security architecture and security-by-design requirements for new projects, systems and major technology changes.
• Strengthen cyber resilience by overseeing preparedness for significant cyber incidents, critical vulnerabilities, recovery capabilities and crisis response.
• Provide strategic direction and executive-level guidance during major cybersecurity incidents.
• Monitor emerging cyber threats relevant to ports, maritime, logistics and critical infrastructure and translate these into practical security priorities.
• Drive cybersecurity transformation initiatives, including areas such as Zero Trust, AI-enabled security, automation, advanced detection and OT security.
• Establish meaningful cybersecurity metrics, maturity assessments and executive reporting.
• Build internal cybersecurity capability, develop talent and manage strategic security partners, suppliers and approved budgets.
• Engage effectively with senior management, auditors, business and operational teams, as well as relevant Group and industry stakeholders.

What We're Looking For

• Bachelor’s Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering or a related discipline.
• Typically 12–15 years of progressive experience in cybersecurity, information security, technology risk or related disciplines, with substantial leadership exposure.
• Proven experience in cybersecurity strategy, governance, architecture, risk, compliance, assurance, resilience and transformation.
• Practical exposure to enterprise IT and preferably OT / industrial control systems, critical infrastructure, ports, maritime, logistics, large-scale automation or other high-availability operational environments.
• Experience engaging with senior management, auditors, regulators and governance functions.
• Demonstrated ability to lead cross-functional responses to significant cyber incidents.
• Experience managing cybersecurity partners, budgets, sourcing decisions and capability development. FM-HRD-BPD_JDF1-001_HDTS
• Strong executive communication skills with the ability to translate complex technical risks into clear business and operational impact.
• Strong leadership, strategic thinking, sound judgement and ability to constructively challenge stakeholders when required.

Professional Certifications

Professional certifications such as CISSP, CISM, CRISC, CCSP, GIAC, SABSA, ISO/IEC 27001 Lead Implementer / Lead Auditor, or equivalent, are strongly preferred.

Key Areas of Expertise

Cybersecurity Strategy & Governance | Enterprise Cyber Risk | GRC & Assurance | Security Architecture | IT/OT Security | Cyber Resilience | Incident Governance | Threat & Vulnerability Management | Security Transformation | Third-Party Security | Leadership & Capability Building