Information Technology Security Specialist

TG Malaysia; Selangor; On-site; MYR 80,000 - 120,000; Full time

Job summary

A leading technology firm in Malaysia is seeking an experienced security operations lead. You will manage day-to-day IT security operations, monitor systems for vulnerabilities, and ensure compliance with Bank Negara Malaysia standards. The ideal candidate has at least 6 years of experience in IT security, strong incident response skills, and expertise in vulnerability management. This role offers competitive compensation and opportunities for career advancement.

Qualifications

• Min 6-7 years in security.
• Experience in developing and implementing security solutions.
• Lead response to IT security incidents.

Responsibilities

• Oversee IT security operations and incident response.
• Monitor system logs for risk detection.
• Identify and analyze security threats and breaches.
• Conduct problem management and maintain documentation.
• Participate in IT security assessments for compliance.

Skills

Firewall maintenance

SIEM experience

Vulnerability management

Incident response

Security monitoring

Cybersecurity risk assessment

Tools

ZeroTrust

IDS/IPS

WAF

VPN Technology

Job description

Must Have Requirements

• Must know how to maintain or change firewall policy, block the attack
• Have experienced in Security Incident Event Log Management(SIEM)
• Hands on with security patches, vulnerability management, access control, patch management
• Able to analyze Pentest result, identify & understand the gap and implement remediation/action
• This role mainly analyze and monitor security/event logs, whenever receive alerts, need to investigate and fix it
• Min 6-7 years in security
• Minimum 6 years of specialization in IT related Security Technologies, IT General Control and IT Processes and hands on technical experience in implement/maintain/knowledge of IT security related solution/systems, including ZeroTrust, Network Security Monitoring, NAC, L2/L3 Firewalls, Routing, Switching, IDS/IPS, Proxy, WAF, VLAN, VPN Technology, Endpoint/intrusion Detection & Response Solution, Event Management (SIEM) Technologies, Content Filtering, Encryption Technology, DHCP, DNS, HTTP, SSL, SSH, LDAP, IPSEC, DLP, etc.
• Min. 6 years of related hands-on experience in developing, implementing, or architecting information security related solution, vulnerability scans & patch management, lead the response to audit/compliance/ IT Security incident/cyber security risk assessments, cyber security threat/logs monitoring & analysis, vulnerability/penetration assessments, response to MSS/SOC threat notification. • Experience to lead & participate in Project Implementation •
• Vendor sourcing, process PO & payment request

Job Descriptions

• Lead and oversee day-to-day IT security operations, incident response, and administration of servers, networks, and endpoint devices.
• Monitor system logs and alerts to proactively detect and mitigate risks, minimizing business disruption.
• Identify and analyze security threats, vulnerabilities, and breaches; perform incident investigations, vulnerability scans, patch management, and penetration testing.
• Conduct problem management and root cause analysis, maintain documentation, and prepare post-incident reports.
• Participate in IT security assessments, ensuring compliance with Bank Negara Malaysia (BNM) standards, industry regulations, and corporate policies.
• Recommend and implement security controls, system architecture designs, and enhancements for networks, applications, and infrastructure.
• Serve as an in-house subject matter expert, providing guidance on IT security controls, risk mitigation, and remediation.
• Deliver security awareness training and phishing simulations to strengthen organizational resilience.
• Collaborate with internal and external auditors, track remediation progress, and ensure timely closure of audit/compliance gaps.
• Establish, review, and maintain security policies, procedures, and guidelines; prepare reports with findings, outcomes, and recommendations for continuous improvement.