Head of IT Security

Oxydata Software Sdn Bhd; George Town; On-site; MYR 180,000 - 300,000; Full time

Job summary

Oxydata Software Sdn Bhd in Penang, Malaysia seeks an experienced Head of IT Security to lead the cybersecurity function for a global manufacturing organisation.

You will set strategy, oversee SOC and incident response, drive regulatory compliance, and mentor security teams across regions, vendors, and product lines. This senior leadership role requires 10+ years in information security, relevant certifications, and a proven track record in risk management and cyber resilience.

Qualifications

• Bachelor's degree required.
• Applicants must have legal right to work in Malaysia; visa sponsorship not available.
• 10+ years information security/cybersecurity experience.

Responsibilities

• Lead Information Security and Cybersecurity function with strategy and governance.
• Develop and implement cybersecurity roadmaps, policies, and standards.
• Oversee security operations including SOC, vulnerability management, and incident response.
• Own major cybersecurity incidents and crisis management including post-incident improvements.
• Drive cyber resilience and operational security across networks, endpoints, cloud, and manufacturing environments.
• Lead ISO/IEC 27001 compliance and related frameworks (NIST CSF).
• Manage cybersecurity risks related to third parties, vendors, and supply chains.
• Develop and mentor cybersecurity teams, manage vendors, tools, and budgets.
• Present risks, incidents, KPIs, and recommendations to senior/executive management.

Skills

CISSP

CISM

CRISC

GICSP

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

NIST CSF

Security Operations

Incident Response

Cyber risk management

Regulatory compliance

Education

Bachelor's degree in related discipline

Tools

SIEM platforms

Job description

Location: Penang, Malaysia

Work Mode: Onsite

Employment type: Permanent

Experience Level: 10+ years

Work Eligibility: Applicants must have the legal right to work in Malaysia. Visa sponsorship is not available for this position.

Our client is a pioneering manufacturer of high-energy density lithium-ion cells, specialising in innovative silicon-anode battery technology designed for various applications, including smartphones, wearables, and electric vehicles. With a focus on breakthrough 3D architecture and high-volume production, they are committed to delivering next-generation battery solutions that enhance performance and longevity. Headquartered in Fremont, California, they are poised to support the growing demands of the AI era and connected devices across multiple industries.

We are seeking an experienced Head of IT Security to lead the cybersecurity function for a global manufacturing organisation.

Responsibilities

• Lead the Information Security and Cybersecurity function, setting strategic direction and governance frameworks.
• Develop and implement cybersecurity strategies, roadmaps, policies, and standards.
• Oversee security operations including SOC, vulnerability management, threat management, security monitoring, and incident response.
• Take ownership of major cybersecurity incidents and crisis management, including containment, recovery, stakeholder communication, and post-incident improvement.
• Drive cyber resilience and enhance operational security capabilities across the organisation.
• Assess and improve security across networks, identity, endpoints, cloud, applications, and operational/manufacturing environments.
• Lead ISO/IEC 27001 compliance and certification-readiness activities, and apply relevant frameworks such as ISO 27001 and NIST CSF.
• Manage cybersecurity risks related to third parties, vendors, and supply chains.
• Manage and mature SOC / MSSP capabilities.
• Lead and develop cybersecurity teams, manage vendors, security tools, and budgets.
• Present cybersecurity risks, incidents, KPIs, and recommendations to senior and executive management.

Requirements

Must-have:

• Bachelor's degree in any related discipline.
• Applicants must have the legal right to work in Malaysia. Visa sponsorship is not available for this position.
• CISSP, CISM, CRISC, GICSP, ISO 27001 Lead Implementer / Lead Auditor, or other relevant cybersecurity certifications.
• Minimum 10 years of Information Security / Cybersecurity experience.
• At least 3 years in a senior cybersecurity leadership role such as Head of Security, Security Director, Deputy CISO, or Senior Security Manager.
• Extensive experience in Security Operations / SOC and Incident Response.
• Proven experience leading major cybersecurity incidents or cyber crisis management.
• Experience in cyber resilience, vulnerability/threat management, cybersecurity risk, and regulatory compliance.
• Strong practical knowledge of ISO/IEC 27001.
• Good knowledge of NIST Cybersecurity Framework (NIST CSF).
• Experience developing cybersecurity strategies, policies, and security roadmaps.
• Experience managing cybersecurity teams, vendors, and service providers.

Nice-to-have:

• Cybersecurity experience within manufacturing, industrial, energy, utilities, logistics, or critical infrastructure.
• OT / IC S / SCADA cybersecurity exposure.
• Knowledge of IEC 62443.
• OT network segmentation or industrial security monitoring experience.
• Experience managing SOC / MSSP providers.
• Experience working within a multinational/global organisation.
• Azure / Microsoft 365 security exposure.
• Third-party and supply-chain cybersecurity experience.
• Previous interim or contract cybersecurity leadership experience.
• Bahasa Malaysia or Mandarin language capability is advantageous but not mandatory.

Why Join Us

• Join a global leader in manufacturing and play a pivotal role in shaping the organisation's cybersecurity landscape.
• Opportunity to drive impactful change, work with a talented team, and ensure the highest standards of security in a dynamic, international environment.