IT & Cyber Risk Manager

Visa Hunt; Malaysia; On-site; MYR 110,000 - 160,000; Full time

Job summary

Visa Hunt in Malaysia seeks a seasoned Cyber Security Lead to monitor and maintain the organization's security posture. You will track vulnerabilities, analyze threats, apply patches for CVEs, and respond rapidly to incidents with precise containment and remediation actions.

The role requires supervising access controls, implementing security frameworks, and educating users on best practices to reduce risk across the enterprise.

Qualifications

• Bachelor’s degree in IT, IS or equivalent with related experience.
• 5–8 years of prior relevant experience.
• Strong understanding of TCP/IP, ports, protocols, OSI model and defense-in-depth.
• Experience analyzing large logs and network data for incident investigations.
• Experience with vulnerability scanning and cloud security (GCP/AWS/Azure).
• Knowledge of mobile OS and VMware is a plus.

Responsibilities

• Monitor and maintain internet, email and web security for the organization.
• Track, monitor, analyze and resolve vulnerabilities or security issues.
• Monitor for new CVEs and ensure patches are applied to affected systems.
• Respond to and resolve any vulnerabilities or security incidents.
• Act as the point of contact on security incidents to respond, isolate and remediate.
• Ensure periodic testing of networks and systems for violations and inefficiencies.
• Stay updated on cyber threats and adapt CIS Benchmarks to new risks.
• Manage user accounts and access controls.
• Develop and maintain IT and cyber security frameworks, policies and procedures.
• Safeguard network elements including LANs, WANs, VPNs, VLANs and more.
• Monitor network performance, identify bottlenecks, and troubleshoot issues.
• Create user awareness through ongoing cybersecurity education.

Skills

Vulnerability assessments

Threat awareness

Network analysis

Communication skills

Cyber law & compliance

Attention to detail

Education

Bachelor’s degree in IT or IS

Job description

Job Responsibilities:

• Monitor and maintain the internet, email and web security for entire organization.
• Track, monitor, analyze and resolve any vulnerability or security issue.
• Monitor on new CVE and ensure affected systems are being patched accordingly.
• Respond and resolve any vulnerability or security incident that may arise.
• Act as the point of contact on any security incidents to respond, isolate, remediate, or resolve the incident quickly.
• Ensure periodic testing of the organizations network and systems to determine security violations and inefficiencies.
• Stay up-to-date on the latest cyber threats and to adapt CIS Benchmarks to proactively safeguard any new emerging security risks.
• Manage user accounts and access controls.
• Develop, implement and maintain the IT and Cyber security frameworks, procedures and policies.
• Safeguard all network elements including but not limited to computer networks, local area networks (LANs), wide area networks (WANs), internet connections, intranet, VPNs, VLANs, VoIP and other data communication systems.
• Monitor network performance, identify bottlenecks, and troubleshoot network issues.
• Create user awareness with continuous education on Cybersecurity.

Key Skill Requirements:

• Proficiency in conducting regular vulnerability assessments of the systems to prevent any security incident.
• Awareness of the latest methods used by hackers and malicious elements to break into systems.
• Competency to use the available tools to discover any dubious movement in the network and system.
• Soft skills including effective verbal communication and advanced written with all levels in the company.
• Knowledge of cyber laws and compliance requirements as per the law of the land.
• Ability to conduct an in-depth analysis of computer networks and identify any vulnerabilities in the system. Attention to detail is a fundamental personality trait for this position and able to meet deadlines with minimal supervision.

Qualification and Experiences requirement:

• Bachelors degree in Information Technology (IT), Information Security (IS) or equivalent education with work related experience.
• Minimum 5-8 years of prior relevant experience.
• Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.
• Hands-on experience analyzing high volumes of logs, network data (e.g., Full-Packet Capture FPC), and other attack artifacts in support of incident investigations.
• Experience with vulnerability scanning and monitoring solutions.
• Experience on Office365 and other Cloud Security (e.g., GCP, AWS, Azure).
• Understanding of mobile technology and OS (e.g., Android, Huawei, iOS, Windows), VMware technology is a plus.