Head of IT Security

Oxydata Software Sdn Bhd; Penang; On-site; MYR 180,000 - 300,000; Part time

Job summary

Oxydata Software Sdn Bhd in Penang seeks a Head of IT Security to lead the cybersecurity function across enterprise IT and manufacturing OT environments. You will define the security strategy, oversee risk management, and drive incident response readiness.

The role requires 10+ years in information security, at least 3 years in a leadership capacity, and hands-on OT/ICS security experience. You will build a team, govern policies, and partner with executives to elevate the security posture of the

Qualifications

• Bachelor’s degree in any related discipline.
• Minimum 10 years in information security or cybersecurity.
• At least 3 years in a cybersecurity leadership role.
• Strong experience in manufacturing, industrial, energy, utilities, or logistics.
• Hands-on exposure to OT/ICS/SCADA cybersecurity.
• Knowledge of IEC 62443 and ISO/IEC 27001.

Responsibilities

• Lead the overall information security and cybersecurity function across IT and OT environments.
• Develop and execute the information security strategy and security roadmap.
• Present cybersecurity risks, KPIs, and recommendations to senior management.
• Lead, coach, and develop the information security team.
• Oversee security operations including vulnerability and incident response.
• Own major cybersecurity incident response activities.
• Build or mature SOC/MSSP security operations capabilities.
• Establish and maintain cybersecurity policies, standards, and governance.
• Lead ISO/IEC 27001 compliance and certification-readiness.
• Apply security frameworks such as ISO/IEC 27001, NIST CSF, IEC 62443.
• Strengthen OT/ICS security across manufacturing plants.
• Manage third-party and supply-chain cybersecurity risks.
• Manage cybersecurity vendors, tooling, and budgets.
• Run security awareness and phishing simulations.

Skills

Cybersecurity leadership

OT/ICS security

Industrial cybersecurity

Stakeholder management

Incident response

Education

Bachelor's degree

Tools

IEC 62443

ISO 27001

NIST CSF

Job description

Employment type: The initial engagement is a 12-month contract with potential conversion to permanent employment.

Experience Level: 10+ years

Oxydata Software Sdn Bhd established since 2012, helping regional enterprises drive digital transformation through Agentic AI Services, AI Automation & Integration, Data Engineering, AI Training, and IT Managed Services. We are a lean, high-impact team where engineers work directly on cutting-edge AI products serving enterprise clients across Malaysia and the region.

We are seeking an experienced Head of IT Security to lead and elevate the cybersecurity function across both enterprise IT and manufacturing operational technology (OT) environments.

Responsibilities

• Lead the overall information security and cybersecurity function across corporate IT and manufacturing/OT environments.
• Develop and execute the information security strategy and security roadmap.
• Present cybersecurity risks, KPIs, and recommendations to senior management and executive stakeholders.
• Lead, coach, and develop the information security team.
• Oversee security operations including vulnerability management, threat management, cyber threat intelligence, and incident response.
• Own and lead major cybersecurity incident response activities.
• Build or mature SOC/MSSP security operations capabilities.
• Establish and maintain cybersecurity policies, standards, and governance frameworks.
• Lead ISO/IEC 27001 compliance and certification-readiness initiatives.
• Apply security frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, and IEC 62443.
• Strengthen OT/ICS security across manufacturing plants.
• Implement and improve OT network segmentation and security monitoring.
• Manage third-party and supply-chain cybersecurity risks.
• Manage cybersecurity vendors, tooling, and security budgets.
• Run security awareness and phishing simulation programmes.

Requirements

Must-have

• Bachelor’s degree in any related discipline.
• Minimum 10 years of experience in information security or cybersecurity.
• At least 3 years in a cybersecurity leadership role (e.g. Head of Information Security, Security Director, Deputy CISO, Senior Security Manager).
• Strong experience within manufacturing, industrial, energy, utilities, or logistics environments.
• Hands-on exposure to OT/ICS/SCADA cybersecurity.
• Strong understanding of industrial cybersecurity and manufacturing/plant security.
• Experience with IEC 62443 or similar OT security standards.
• Strong knowledge of ISO/IEC 27001 and NIST Cybersecurity Framework.
• Experience leading cybersecurity incidents and incident response.
• Experience developing cybersecurity strategies, policies, and roadmaps.
• Strong stakeholder management skills with experience presenting to senior leadership.
• Experience managing cybersecurity teams, vendors, and budgets.

Nice-to-have

• Professional certifications such as CISSP, CISM, CRISC, GICSP, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or other relevant cybersecurity/OT security certifications.
• Experience working within a multinational or global organisation.
• Experience managing SOC or MSSP providers.
• Azure/Microsoft 365 security experience.
• ERP security exposure.
• Experience with OT network segmentation and industrial monitoring solutions.
• Previous interim, consulting, or contract cybersecurity leadership experience.

Why Join Us

• Play a pivotal role in safeguarding both enterprise and industrial operations at scale.
• Shape the security posture of a forward-thinking organisation and work with cutting-edge technologies.
• Collaborate with a diverse team of professionals and directly impact the resilience and success of the business in a rapidly evolving threat landscape.

Computer Software & Networking 51-100 employees

We are local 100% Malaysian-owned MSC status company established in 2006 serving ASEAN region. Our core competencies are in IT Managed Services, Dev/Ops, Outsourcing, Analytics development services, and Microsoft Platform development such as SharePoint, Power Platform, Dynamics CRM, and .NET/Mobile Application development. We help our clients to realize their results through digital transformation using our innovative IT services and software solutions.

We are local 100% Malaysian-owned MSC status company established in 2006 serving ASEAN region. Our core competencies are in IT Managed Services, Dev/Ops, Outsourcing, Analytics development services, and Microsoft Platform development such as SharePoint, Power Platform, Dynamics CRM, and .NET/Mobile Application development. We help our clients to realize their results through digital transformation using our innovative IT services and software solutions.