Information Security analyst

Air Liquide; Selangor; On-site; MYR 201,000 - 268,000; Full time

Job summary

Air Liquide IT is modernising its IT services with centralized Global Infrastructure Operations (GIO) and BIS departments for each business line and geography. The role focuses on securing IoT/OT infrastructure, coordinating penetration testing, and driving risk-aware security practices across APAC.

The candidate will collaborate with stakeholders to balance technology, people, and process, leveraging frameworks like NIST and ISO/IEC 27002 while supporting cloud and container environments such

Qualifications

• Degree qualified or 5+ years in infrastructure design and implementation.
• Experience with IoT/OT security frameworks (NIST 800-82, ISO/IEC 27002).
• Knowledge of cloud environments (Azure/AWS) and IoT cloud.
• Strong analytical and troubleshooting skills.
• Excellent communication and stakeholder management.

Responsibilities

• Define methodology, conduct security assessments, and address findings by supporting solution implementation.
• Identify IoT/OT architectural vulnerabilities with risk statements and mitigation options.
• Support and manage the Group OT Security programme deployment in APAC.
• Coordinate Penetration Testing activities and track gaps to closure.
• Socialize security policy across OT organization to educate and build secure systems.
• Assist stakeholders to balance technology with people and process considerations.

Skills

IoT/OT security

Cloud OT

Vulnerability management

NIST/ISO frameworks

Kubernetes

Communication

Analytical thinking

Education

Degree in IT/Engineering

Tools

Kubernetes

VM containers

Cloud platforms

Job description

Jora Malaysia will close on 16th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Air Liquide IT: The Group launched an overhaul of its IT services, to simultaneously improve and world security, competitiveness and agility. This results in a changing IT organizations with infrastructure services and IT production which will now be managed globally by a central department called GIO (Global Infrastructure Operations) and business applications that will be supported by dedicated departments, called BIS (Business Information Systems) for each business line and relevant geographies.

How will you CONTRIBUTE and GROW?

• Define methodology, conduct security assessments, and address any findings by supporting solution implementation to develop segmented infrastructure that includes various IoT/OT technologies and models best practices.
• Identify and effectively communicate IoT/OT architectural vulnerabilities with supporting risk statements and realistic mitigation options to stakeholders.
• Support and manage the Group OT Security programme deployment within the APAC region
• Identify cleanup activities within Air Liquide IoT/OT legacy security issues and achieve pragmatic and measurable objectives.
• Coordinate Penetration Testing activities on critical sites. Responsible to track and monitor those identified gaps till closure
• Socialize security policy and standards across relevant areas of the OT organization - empowering and educating people to build secure and compliant systems.
• Support Cybersecurity operations team during and after security incidents and develop mitigation plans to avoid future occurrences.
• Assisting internal stakeholders to understand not just the technology aspects of security but to balance these with people and process aspects to create a coherent overall approach.
• Experience of IoT/OT security frameworks and standards eg. NIST 800-82, ISO/IEC 27002, ideally in the delivery of global IT services
• Knowledge of Vulnerability management tools and frameworks
• Understanding of OT and industrial control systems concepts
• Knowledge of Cloud OT environments (Azure/AWS) and IoT cloud including Kubernetes and other VM containers desirable
• Proven analytical and troubleshooting skills in prior roles
• Degree qualified or with more than 5 years of Infrastructure design and implementation background
• (Good to have) Relevant certifications eg. Global Industrial Cyber Security Professional (GICSP), GIAC Response and Industrial Defence (GRID), GIAC Critical Infrastructure Protection (GCIP) highly desirable
• Knowledge in COBIT and ITIL Frameworks
• Analytical and objective – able to elaborate on, characterize, assess and evaluate technology and tech-related risks dispassionately and rationally;
• An influencer and facilitator – able to build strong interpersonal relationships, and inform, guide and motivate managers and technologists with due care and attention to detail;
• Strong communication skills – able to explain often complex and obscure technical detail to non-specialists, and (just as importantly) good at listening and sensitively interpreting others

Other Information:

• Office Location: Level 17, 1Powerhouse