Infrastructure Security Manager

NTT Data; Kuala Lumpur; On-site; MYR 100,000 - 120,000; Full time

Job summary

A global technology services leader in Kuala Lumpur is seeking an Infrastructure Security Manager. The role involves ensuring the security and compliance of IT infrastructure while managing operational security processes. Candidates should have at least 7 years in IT security, preferably with 4 years in infrastructure security within financial industries. Professional certifications such as CISSP or CISM are preferred. This position offers opportunities to work in a dynamic environment focused on innovation and security.

Benefits

Remote or hybrid work options

Access to innovation centers and partnerships

Global Top Employer benefits

Qualifications

• 7+ years of IT security experience, including 4 years in infrastructure security.
• Professional certifications like CISSP, CISM, CISA, or CCSP are preferred.
• Experience with PCI DSS 4.0 compliance and financial industry regulations.

Responsibilities

• Ensure the security and compliance of the organization’s IT infrastructure.
• Manage firewall rule reviews and internal vulnerability assessments.
• Prepare and manage monthly infrastructure security KPI reports.

Skills

IT security

hands-on technical expertise in infrastructure security

compliance frameworks

firewall technologies

vulnerability management

DLP tools

Education

Bachelor’s degree in Information Security, Computer Science, or related field

Tools

PCI DSS 4.0

Cyber Threat Intelligence (CTI)

Job description

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

Overview

We are currently seeking an Infrastructure Security Manager to join our team in Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur (MY-14), Malaysia (MY).

About the Job

About the Job

The Manager, Infrastructure Security will be responsible for ensuring the security, compliance, and resilience of the organisation’s IT infrastructure. This role is an individual contributor position that requires hands-on technical expertise in infrastructure security management, compliance frameworks (including PCI DSS 4.0), and operational security processes. The individual will work closely with IT custodians, risk management, and internal stakeholders to maintain a strong security posture.

• Establish, maintain, and periodically review standard operating procedures (SOPs) for business-as-usual (BAU) infrastructure security management.
• Ensure security policies and standards are consistently implemented across on-premises, cloud, and hybrid platforms.
• Establish and maintain processes aligned with PCI DSS 4.0 requirements to support ongoing compliance readiness.
• Maintain and continuously improve processes and documentation related to infrastructure security.
• Perform firewall rule reviews on a periodic basis, ensuring compliance with security policies and risk tolerance.
• Monitor, track, and follow up on remediation of security findings from internal network vulnerability assessments (NVA).
• Manage Data Loss Prevention (DLP) exception requests and ensure proper governance and approval workflows.
• Oversee the execution of internal NVA and wireless penetration tests, including triage and remediation coordination.
• Ensure timely dissemination of Cyber Threat Intelligence (CTI) to IT custodians for risk assessment and action.
• Coordinate and support cyber insurance review and renewal processes, providing relevant security documentation and updates.
• Prepare, track, and manage monthly infrastructure security KPI reports for management and stakeholders.

We are looking for people who

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 7+ years of IT security experience, with at least 4 years in infrastructure security within financial industries.
• Professional cybersecurity certifications such as CISSP, CISM, CISA, or CCSP are preferred.
• Strong knowledge of firewall technologies, vulnerability management, and DLP tools.
• Experience with PCI DSS 4.0 compliance and other financial industry regulatory requirements.
• Familiarity with threat intelligence, cyber insurance, and IT risk management practices.

About NTT DATA

NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D.

Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs.

EEO Notice: NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, and Pay Transparency information, please refer to our official site.