Information Security Manager

Simplepay Gateway; Kuala Lumpur; On-site; MYR 80,000 - 120,000; Full time

Job summary

A prominent fintech company in Kuala Lumpur is seeking a Cybersecurity Specialist to manage and develop the IT security framework. This role involves ensuring compliance with security policies, conducting security reviews, and preparing IT Security Architecture. Candidates must have at least 5 years of experience in IT security and be proficient in cybersecurity frameworks such as NIST and ISO 27001. Leadership skills and the ability to train employees are crucial for this role.

Qualifications

• Minimum of 5 years of experience in IT security or cybersecurity management.
• CISM certification preferred; CISSP and CEH are optional.
• Strong analytical and problem-solving skills.

Responsibilities

• Manage cyber-security plan and security infrastructure.
• Prepare IT Security Architecture and conduct security performance reviews.
• Ensure compliance with audit trails and security policies.
• Develop secure working policies and provide employee training.
• Lead PCI DSS audits and certifications.

Skills

IT security tools proficiency

Cybersecurity frameworks knowledge

PCI DSS standards expertise

Threat analysis understanding

Communication skills

Leadership abilities

Education

Bachelor’s Degree in Information Technology, Cybersecurity, or related fields

Master’s Degree (preferred)

Job description

To manage, develop, and maintain the organization's IT security framework, ensuring the integrity, confidentiality, and availability of information assets while meeting regulatory compliance requirements and addressing emerging cyber threats.

Responsibilities

• Manages cyber-security plan, security infrastructure, security standards and best practices; set up procedures and automated processes to monitor the status of computers and networks
• Prepare IT Security Architecture
• Responsible security performance reviews & measurement: build on an existing information security program and ongoing security projects that address information security risks and compliance requirements; manage the process of gathering, analyzing and assessing the current and future threat landscape
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements, report on compliance with security policies, as well as the enforcement of policies across the company
• Develop policies that encourage secure working and protect data, provide training for employees, explaining security risks and demonstrating good practices
• Lead research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment10
• Lead and ensure the success of PCI DSS (Payment Card Industry Data Security Standard) audits and certifications. Provide resolution for problem solving escalations & checking

Position Competencies

Technical Competency

• Proficiency in IT security tools, techniques, and technologies
• In-depth knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001)
• Expertise in PCI DSS standards and audit processes
• Strong understanding of threat analysis, risk assessment, and compliance requirements
• Familiarity with system architecture design for security integration

Soft Competency

• Excellent analytical and problem-solving skills
• Strong communication and interpersonal skills
• Leadership and team management capabilities
• Ability to train and mentor employees on security practices

Job Specification

• Minimum Education: Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or related fields (Master’s Degree preferred).
• Previous Relevant Work Experience: At least 5 years of experience in IT security, cybersecurity management, or related roles.
• Certification requirements:
  • CISSP (Certified Information Systems Security Professional) (optional)
  • CISM (Certified Information Security Manager) (preferred)
  • CEH (Certified Ethical Hacker) (optional)