Information Security Consultant

Turner & Townsend Limited; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Turner & Townsend Limited is seeking an IT Security team member responsible for protecting enterprise-wide solutions. This role involves incident management, security compliance, risk identification, and developing security procedures in a fast-paced environment. Ideal candidates will possess experience in security technologies and standards.

Benefits

Flexible working environment

Diversity and inclusion initiatives

Qualifications

• At least two years of hands-on experience in security and/or infrastructure.
• Exposure to information security standards like ISO 27001 and GDPR.
• Experience with security operations and auditing.

Responsibilities

• Assist with security incident management and response activities.
• Perform security checks, reconciliation, and compliance activities.
• Develop and enhance security policies and technical controls.

Skills

Security Incident Management

Risk Identification

Vulnerability Management

Interpersonal Skills

Education

Experience in IT Security and/or Infrastructure

Tools

Microsoft O365 Security Solutions

Job description

Turner & Townsend is a global professional services company with over 22,000 people in more than 60 countries.

Working with our clients across real estate, infrastructure, energy, and natural resources, we transform together delivering outcomes that improve people’s lives. Working in partnership makes it possible to deliver the world’s most impactful projects and programmes as we turn challenge into opportunity and complexity into success.

Our capabilities include programme, project, cost, asset and commercial management, controls and performance, procurement and supply chain, net zero, and digital solutions.

We are majority-owned by CBRE Group, Inc., the world’s largest commercial real estate services and investment firm, with our partners holding a significant minority interest. Turner & Townsend and CBRE work together to provide clients with the premier programme, project, and cost management offering in markets around the world.

Please visit our website: www.turnerandtownsend.com

Job Description

As a member of the IT Security team, you will review all aspects of the IT environment and its components. This role shall be responsible for supporting and maintaining enterprise-wide solutions. The successful candidate will be required to proactively improve and provide advice and guidance on information security matters. This is an excellent opportunity for candidates with a strong understanding of IT infrastructure and/or information security within a fast-paced environment.

SOX control responsibilities may be part of this role, which are to be adhered to where applicable.

• Assist with security incident management and response activities.
• Support day-to-day management and response to security alerts from systems and end users.
• Perform security checks, reconciliation, and compliance activities regularly, investigating any exceptions.
• Complete client security requirement questionnaires and support the bidding process.
• Identify and raise awareness of security risks.
• Develop and enhance security policies, processes, procedures, and technical controls to strengthen security capabilities and resilience to cyber threats.
• Proactively identify security risks, mitigations, and opportunities to improve resilience against cyber-attacks and incidents.
• Participate in the design and implementation of systems and applications.
• Develop user and technical training guides.
• Maintain and manage the IT Risk register.
• Test Disaster Recovery plans to ensure effectiveness, identify gaps, and work with the business on improvements.

Qualifications

Technical Requirements:

• At least two years of hands-on experience in security and/or infrastructure within an enterprise environment.
• Exposure to enterprise information security standards such as Cyber Essentials, ISO 27001, 27002, Data Protection Act, and GDPR.
• Experience with Microsoft O365 Security solutions, Networking, Security operations, Vulnerability Management, and Security Auditing.
• Good understanding of security testing principles, including vulnerability scanning, risk identification, resolution, and reporting.
• Experience in creating formal documents like reports or procedures.

Detailed knowledge of:

• Threat Intelligence analysis and best practices.
• Security Incident Response processes, procedures, and best practices.
• Disaster Recovery and Business Continuity principles.
• Event and log analysis.

Core Behavioral Skills:

• Confident individual with strong interpersonal skills, able to communicate clearly with users at all levels.
• Team player.
• Analytically minded, capable of understanding complex information.
• Comfortable working in a dynamic, fast-moving environment.
• Customer-focused, experienced in supporting demanding users.
• Good organizational skills, able to manage and prioritize workload effectively.
• Ability to report progress and activities clearly.

Additional Information

Our inspired people share our vision and mission. We provide a great place to work, where each person has the opportunity and voice to affect change.

We support our people to succeed both professionally and personally, promoting a healthy, flexible, and balanced work environment.

Turner & Townsend is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We actively encourage applications from all sectors of the community.

Join our social media conversations for more about Turner & Townsend and our future projects:

It is strictly against Turner & Townsend policy for candidates to pay any fee related to our recruitment process. No agency working with us will ask for payment at any time.

Any unsolicited resumes/CVs submitted through our website or to personal email accounts are considered property of Turner & Townsend and are not subject to agency fee payments. To be an authorized Recruitment Agency/Search Firm, a formal agreement must be in place, and the agency must be invited by our Recruitment Team to submit candidates.