Infrastructure Security & Risk Advisor

AmBank Group; Kampung Malaysia Tambahan; On-site; MYR 120,000 - 180,000; Full time

Job summary

AmBank Group in Kuala Lumpur seeks an Infrastructure Security Risk Specialist to oversee technology risk for IT infrastructure, ensuring data protection, identity access management, and patch management are aligned with regulatory expectations and CISO strategy.

You will collaborate with stakeholders, perform risk assessments, advise on mitigating controls, and coordinate remediation across IT teams, RCSA requirements, and industry standards such as BNM RMiT and PCI DSS.

Qualifications

• Bachelor’s Degree in Computers or Information Technology.
• 3–5 years of IT experience in governance, risk management, and control management.
• Deep security understanding in IT Infrastructure Security or Cybersecurity; hands-on with DLP, IAM, EDR.
• Professional Certifications (CEH, CISM, CRISC, ISO 27001) recommended.

Responsibilities

• Oversight of technology risk management for IT infrastructure and liaison with regulators and stakeholders.
• Ensure compliance with regulatory requirements such as BNM RMiT, PCI DSS and Security Commission guidelines.
• Provide IT infrastructure/cyber security advisory support for projects and risk mitigation.
• Protect IT infrastructure, data, files and applications against known threats and emerging risks.
• Support risk assessments for infrastructure projects and align with 1st line controls.
• Review IT security levels and recommend improvements aligned with best practices.
• Coordinate remediation efforts and assist with evidence gathering for risk issues.
• Identify emerging risks, summarize issues, and explain risk trends.

Skills

DLP

IAM

EDR

Education

Bachelor's Degree in Computers or Information Technology

Job description

AmBank Group in Kuala Lumpur seeks an Infrastructure Security Risk Specialist to oversee technology risk for IT infrastructure, ensuring data protection, identity access management, and patch management are aligned with regulatory expectations and CISO strategy.

You will collaborate with stakeholders, perform risk assessments, advise on mitigating controls, and coordinate remediation across IT teams, RCSA requirements, and industry standards such as BNM RMiT and PCI DSS.