Infrastructure Security Manager

DIGITAL BRIGHT TECHNOLOGIES; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Digital Bright Technologies in Kuala Lumpur, Malaysia is seeking a Manager, Infrastructure Security to lead the security, compliance, and resilience of the IT infrastructure. This role focuses on hands-on technical expertise in infrastructure security management across on‑prem, cloud, and hybrid environments.

You will drive PCI DSS 4.0 compliance, SOP development, and risk-based security improvements while collaborating with IT custodians and risk teams.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field.
• 7+ years of IT security experience, with at least 4 years in infrastructure security within financial industries.
• Certifications such as CISSP, CISM, CISA, or CCSP preferred.
• Strong knowledge of firewall technologies, vulnerability management, and DLP tools.
• Experience with PCI DSS 4.0 compliance and other financial regulatory requirements.
• Familiarity with threat intelligence, cyber insurance, and IT risk management practices.

Responsibilities

• Ensure security, compliance, and resilience of the organisation's IT infrastructure.
• Establish, maintain, and review SOPs for BAU infrastructure security management.
• Ensure security policies and standards across on-prem, cloud, and hybrid platforms.
• Maintain PCI DSS 4.0 alignment for ongoing compliance readiness.
• Improve processes and documentation related to infrastructure security.
• Oversee NVA reviews, DLP governance, and remediation coordination.
• Disseminate Cyber Threat Intelligence to IT custodians for risk assessment.
• Coordinate cyber insurance reviews and provide relevant security documentation.
• Prepare, track, and manage monthly infrastructure security KPI reports.

Skills

IT security experience

Infrastructure security

Education

Bachelor's degree in Information Security, Computer Science, or related field

Tools

Firewall technologies

Vulnerability management tools

DLP tools

Job description

Kuala Lumpur, Malaysia | Posted on 04/29/2026

The Manager, Infrastructure Security will be responsible for ensuring the security, compliance, and resilience of the organisation's IT infrastructure. This role is an individual contributor position that requires hands-on technical expertise in infrastructure security management, compliance frameworks (including PCI DSS 4.0), and operational security processes. The individual will work closely with IT custodians, risk management, and internal stakeholders to maintain a strong security posture.

Establish, maintain, and periodically review standard operating procedures (SOPs) for business-as-usual (BAU) infrastructure security management.

Ensure security policies and standards are consistently implemented across on-premises, cloud, and hybrid platforms.

Establish and maintain processes aligned with PCI DSS 4.0 requirements to support ongoing compliance readiness.

Maintain and continuously improve processes and documentation related to infrastructure security.

Perform firewall rule reviews on a periodic basis, ensuring compliance with security policies and risk tolerance.

Monitor, track, and follow up on remediation of security findings from internal network vulnerability assessments (NVA).

Manage Data Loss Prevention (DLP) exception requests and ensure proper governance and approval workflows.

Oversee the execution of internal NVA and wireless penetration tests, including triage and remediation coordination.

Ensure timely dissemination of Cyber Threat Intelligence (CTI) to IT custodians for risk assessment and action.

Coordinate and support cyber insurance review and renewal processes, providing relevant security documentation and updates.

Prepare, track, and manage monthly infrastructure security KPI reports for management and stakeholders.

Requirements

We are looking for people who

• Bachelor's degree in Information Security, Computer Science, or related field.
• 7+ years of IT security experience, with at least 4 years in infrastructure security within financial industries.
• Professional cybersecurity certifications such as CISSP, CISM, CISA, or CCSP are preferred.
• Strong knowledge of firewall technologies, vulnerability management, and DLP tools.
• Experience with PCI DSS 4.0 compliance and other financial industry regulatory requirements.
• Familiarity with threat intelligence, cyber insurance, and IT risk management practices.