HEAD, DIGITAL TECHNOLOGY & SECURITY

Port of Tanjung Pelepas; Gelang Patah; In loco; MYR 180.000 - 240.000; Tempo pieno

Descrizione del lavoro

Port of Tanjung Pelepas seeks an experienced cybersecurity leader to advance its Digital & Technology Security across IT and OT within a complex, business-critical port environment.

This strategic role shapes governance, risk management and resilience, leading security strategy, architecture, incident response and executive reporting while building internal capability and managing budgets and strategic partners.

Competenze

• Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering or a related discipline.
• 12–15 years of progressive experience in cybersecurity with leadership exposure.
• Experience in strategy, governance, architecture, risk, compliance, assurance and resilience.
• Exposure to enterprise IT and preferably OT/industrial control systems.
• Experience engaging with senior management, auditors, regulators and governance functions.
• Ability to lead cross-functional responses to significant cyber incidents.
• Experience managing cybersecurity partners, budgets, sourcing decisions and capability development.

Mansioni

• Develop and drive enterprise cybersecurity strategy, governance framework and multi-year security roadmap.
• Provide oversight of cybersecurity risks across IT, OT, cloud, applications, data, networks and automation.
• Establish and govern cybersecurity policies, standards, risk registers, compliance and risk-acceptance processes.
• Lead GRC activities, including audit assurance, remediation and third-party security assessments.
• Define enterprise security architecture and security-by-design requirements for projects.
• Oversee cyber resilience, incident preparedness and crisis response.
• Provide executive guidance during major cybersecurity incidents.
• Monitor emerging threats and translate into practical security priorities.
• Drive cybersecurity transformation initiatives (Zero Trust, AI-enabled security, automation, OT security).
• Establish metrics, maturity assessments and executive reporting.
• Build cybersecurity capability, develop talent and manage partners and budgets.
• Engage with senior management, auditors, business and operational teams and stakeholders.

Conoscenze

Leadership

Cybersecurity strategy

Governance

Risk management

Executive communication

Incident response

IT/OT security

Threat & vulnerability management

Formazione

Bachelor's Degree in Cybersecurity/Related

Descrizione del lavoro

Position: Head, Digital Technology & Security

We are looking for an experienced cybersecurity leader to lead and strengthen PTP's Digital & Technology Security capabilities across our enterprise and operational technology environments.

This is a strategic leadership role responsible for shaping PTP's cybersecurity direction, governance, risk management and resilience while supporting the continued digitalisation of a complex, business-critical port environment.

Key Responsibilities

• Develop and drive PTP's enterprise cybersecurity strategy, governance framework and multi-year security roadmap.
• Provide oversight of cybersecurity risks across IT, Operational Technology (OT), cloud, applications, data, networks, automation and other critical technology environments.
• Establish and govern cybersecurity policies, standards, risk registers, compliance requirements and risk-acceptance processes.
• Lead cybersecurity governance, risk and compliance (GRC) activities, including audit assurance, remediation and third-party security assessments.
• Define enterprise security architecture and security-by-design requirements for new projects, systems and major technology changes.
• Strengthen cyber resilience by overseeing preparedness for significant cyber incidents, critical vulnerabilities, recovery capabilities and crisis response.
• Provide strategic direction and executive-level guidance during major cybersecurity incidents.
• Monitor emerging cyber threats relevant to ports, maritime, logistics and critical infrastructure and translate these into practical security priorities.
• Drive cybersecurity transformation initiatives, including areas such as Zero Trust, AI-enabled security, automation, advanced detection and OT security.
• Establish meaningful cybersecurity metrics, maturity assessments and executive reporting.
• Build internal cybersecurity capability, develop talent and manage strategic security partners, suppliers and approved budgets.
• Engage effectively with senior management, auditors, business and operational teams, as well as relevant Group and industry stakeholders.

What We're Looking For

• Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering or a related discipline.
• Typically 12–15 years of progressive experience in cybersecurity, information security, technology risk or related disciplines, with substantial leadership exposure.
• Proven experience in cybersecurity strategy, governance, architecture, risk, compliance, assurance, resilience and transformation.
• Practical exposure to enterprise IT and preferably OT / industrial control systems, critical infrastructure, ports, maritime, logistics, large-scale automation or other high-availability operational environments.
• Experience engaging with senior management, auditors, regulators and governance functions.
• Demonstrated ability to lead cross-functional responses to significant cyber incidents.
• Experience managing cybersecurity partners, budgets, sourcing decisions and capability development. FM-HRD-BPD_JDF1-001_HDTS
• Strong executive communication skills with the ability to translate complex technical risks into clear business and operational impact.
• Strong leadership, strategic thinking, sound judgement and ability to constructively challenge stakeholders when required.

Professional Certifications

Professional certifications such as CISSP, CISM, CRISC, CCSP, GIAC, SABSA, ISO/IEC 27001 Lead Implementer / Lead Auditor, or equivalent, are strongly preferred.

Key Areas of Expertise

Cybersecurity Strategy & Governance | Enterprise Cyber Risk | GRC & Assurance | Security Architecture | IT/OT Security | Cyber Resilience | Incident Governance | Threat & Vulnerability Management | Security Transformation | Third-Party Security | Leadership & Capability Building