Information Technology Security Assistant Manager

eco-shop Malaysia; Petaling Jaya; On-site; MYR 70,000 - 120,000; Full time

Job summary

eco-shop Malaysia seeks a cybersecurity specialist to safeguard digital assets by implementing security measures and monitoring systems. You will promote security awareness and ensure regulatory compliance across the organization.

The role covers incident response, vulnerability management, encryption, DLP, and collaboration with Data Protection Officer on audits and remediation. On-site work in Malaysia is expected.

Qualifications

• Bachelor’s degree or diploma in IT cybersecurity or recognized security cert.
• Minimum 3–5 years of IT security/SOC experience.
• Hands-on experience with SIEM, firewalls, EDR, MDR, XDR and penetration testing.

Responsibilities

• Develop and implement security policies and procedures.
• Conduct security policy reviews with cross-functional teams.
• Configure alerts for anomalous traffic and perform firewall audits.
• Monitor and manage firewalls, secure network access, and identify unusual traffic.
• Detect, investigate, and respond to security incidents with containment.

Skills

Analytical mindset

Communication

Teamwork

Networking knowledge

Server virtualization

Windows/Linux knowledge

Zero Trust awareness

Education

Diploma/Bachelor's degree in IT Cybersecurity or recognized IT security cert

Tools

SIEM

Firewalls

EDR/MDR/XDR

Penetration testing

Job description

Responsible for safeguarding the organization's digital assets by implementing and maintaining security measures to protect against cyber threats. This role involves monitoring systems, responding to incidents, ensuring compliance, and promoting a culture of security awareness across the company.

Job Responsibilities:

• Develop and implement security policies and procedures aligned with ISO 27001, NIST, GDPR or industry specific regulations.
• Conduct regular security policy reviews and updates with cross functional teams
• Configure alerts for anomalous traffic and regular firewall rule audits to eliminate redundancies
• Monitor and manage firewalls, secure network access and identify network traffic for unusual activity
• Detect, investigate and respond to security incidents, ensuring timely containment and remediation.
• Perform regular vulnerabilities scans using tools and penetration testing.
• Prioritize and implement security patches to address known vulnerabilities.
• Enforce secure configuration across systems and baseline settings across all platforms and devices.
• Manage user access rights, including onboarding/offboarding procedures and enforce least privilege access.
• Prepare documentation and evidence for audits (internal or external). Track and resolve audit findings and compliance issues effectively.
• Work closely with Data Protection Officer and relevant parties
• Track and remediate audit findings or compliance gaps.
• Protect sensitive information using encryption techniques and DLP solutions
• Stay updated on emerging threats and recommend proactive defenses.
• Recommend and implement innovative solutions to strengthen the organization’s security posture.
• Contribution on any Security related project and assignment.

Qualifications:

• Diploma/Bachelor's degree in IT Cybersecurity or certified in any recognize IT Security certificate.
• Minimum 3-5 years working experience in IT Security/ SOC
• Hands-on experience with SIEM, firewalls, EDR, MDR, XDR and penetration testing will be added advantage
• Familiar with Windows/ Linux OS, Networking, Firewall and any others security tools
• Knowledge of networking (TCP/IP, DNS, DHCP, firewalls, Zero Trust)
• Knowledge of endpoint protection tools
• Understanding of server virtualization
• Analytical mindset, communication and teamwork
• Knowledge with cloud security (AWS, Azure)