Information Security Officer

DUG; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

A leading company in the technology sector is seeking a Cyber Security Leader to oversee IT security operations and policies. This role requires extensive experience in cybersecurity management, policy design, and compliance. The ideal candidate will work closely with senior executives and external stakeholders to ensure cybersecurity measures align with business objectives, enhancing DUG’s overall security posture and operational resilience.

Qualifications

• Experience in leading IT security initiatives.
• Proven ability in designing cybersecurity policies.
• Familiar with compliance regulations and standards.

Responsibilities

• Lead and review IT security operations and policies.
• Conduct security audits and manage third-party audits.
• Ensure alignment between cybersecurity and business objectives.

Skills

IT security leadership

Cybersecurity policy implementation

System audits

Security integration

Vendor management

Job description

List of Responsibilities:

• Ongoing leadership and review of IT security
• Implementing and designing cyber security policies, procedures, and system solutions in line with industry standards and certifications
• Operate, conduct, and maintain DUG’s SIEM platform and conduct regular security audits of systems, policies, procedures, network configuration, operating systems, authentication systems, permission structures
• Serve as the DUG point person for third-party security audits
• Provide pre-sales security briefings / Q&A to DUG HPC Cloud customer security teams
• Work with DUG HPC Cloud customers and DUG teams on security integration
• Provide strategic-level guidance for DUG’s cyber security program and ensure compliance with cyber security policies, standards, regulations, and legislation, working with senior executives within DUG
• Ensure the alignment of cyber security and business objectives within DUG, facilitating communication between cyber security and business stakeholders, translating cyber security concepts into business language, and advising on security measures for new projects
• Contribute to the development and maintenance of DUG’s business continuity and disaster recovery plans to enhance resilience and ensure operational continuity
• Report on the security risk profile, status of key systems, outstanding risks, security uplift activities, recent incidents, and cybersecurity investment returns
• Oversee DUG’s response to cybersecurity incidents, including internal communication and response strategies
• Apply a consistent vendor management process across the organization, from discovery to ongoing management