Information Security Manager (Technical Individual Contributor)

Secretlab; Petaling Jaya; On-site; MYR 180,000 - 240,000; Full time

Job summary

Secretlab is seeking an experienced security engineer to protect our networks, systems and data. You will act as the first line of defense against external threats and drive security initiatives in collaboration with Engineering and IT teams.

Responsibilities include implementing robust controls, conducting risk assessments, and leading incident response and forensics efforts. A strong background in cloud security and secure development is required.

Qualifications

• Demonstrated expertise in securing Windows, macOS and UNIX/Linux environments.
• Experience deploying IT security infrastructure including SIEM, EDR and DLP.
• Strong knowledge of ISO 27001, NIST and secure coding standards.

Responsibilities

• Architect, engineer and deploy security controls across networks and systems.
• Develop security policies aligned with ISO 27001 and NIST.
• Run risk assessments, vulnerability scans and penetration tests.
• Optimize automated security playbooks and tooling.
• Provide architectural direction for core security initiatives.
• Lead incident response, forensics and investigations.
• Translate security findings for senior leaders.
• Collaborate with Engineering and IT to embed security in SDLC.

Skills

Security architecture

OS security

Next-Gen Firewalls

SIEM

EDR

DLP

Network security

Secure coding

Cloud security

Identity frameworks

Python

PowerShell

Incident response

Forensics

Security in SDLC

Education

Bachelor’s degree in a relevant field

Tools

Next-Gen Firewalls

SIEM

EDR

DLP

Okta/Entra ID

Job description

Secretlab is an international gaming chair brand seating over a million users worldwide, with our key markets in the United States, Europe and Singapore, where we are headquartered.

You will be a valued member in our technical team, responsible for testing and screening security software and for monitoring networks and systems for security breaches or intrusions. In this role, you will be the company’s first line of defense against unauthorized access from outside sources and potential security threats.

Our Tech team is essential in ensuring that Secretlab’s team members are primed to continue delivering at a world-class level on all our initiatives; including collaborative efforts with world-renowned brands such as Game of Thrones, Batman, Cloud9, Team Secret, as well as international esports organisers such as Riot Games for their League of Legends global tournaments.

Responsibilities

• Architect, engineer, and deploy robust security controls to safeguard our networks, server infrastructure, and critical information systems.
• Craft and oversee comprehensive security policies and standards, ensuring alignment with global frameworks such as ISO 27001 and NIST.
• Execute deep-dive risk assessments, vulnerability scans, and penetration tests to pinpoint and resolve security gaps across our ecosystem.
• Drive the proactive optimization of automated playbooks and security configurations within our advanced software suites.
• Provide high-level architectural oversight and technical direction to ensure our core security initiatives are executed with precision.
• Spearhead incident response maneuvers, digital forensics, and investigations, while maintaining our master incident response roadmap.
• Translate complex security findings into actionable insights for leadership, advising senior management on our overall risk posture.
• Partner with Engineering and IT stakeholders to embed security into system design and the heart of our development lifecycles and operational DNA.
• Monitor the threat landscape to evaluate and integrate cutting-edge security tools that elevate our defensive environment.

Requirements

• Possess advanced technical mastery of database and operating system security across Windows, macOS, and UNIX/Linux environments.
• Demonstrate a proven track record in deploying and managing critical IT security infrastructure, including Next-Gen Firewalls, SIEM, EDR, and DLP solutions.
• Deep expertise in network security and core protocols such as TCP/IP, DNS, and VLANs, supported by the adept use of sophisticated monitoring toolsets.
• Thorough command of cybersecurity principles, defensive techniques, and the implementation of secure coding standards throughout the development lifecycle.
• Extensive experience securing web applications and service-oriented architectures, with a profound understanding of web-related communication protocols.
• Proficiency in scripting languages such as Python or PowerShell to drive automation and create bespoke security tooling.
• Practical experience in architecting security for cloud ecosystems (AWS, Azure, GCP) and managing modern identity frameworks like Okta or Entra ID.
• Exceptional communication skills, with the ability to distill complex technical risks into actionable intelligence for senior leadership and external partners.
• Attainment of top-tier professional certifications such as CISSP, CISM, or CEH is highly regarded.