IT & Cyber Risk Manager

ADI Resourcing; Petaling Jaya; On-site; MYR 180,000 - 240,000; Full time

Job summary

ADI Resourcing is seeking a seasoned IT security professional to monitor and maintain security across the organization. You will track vulnerabilities, respond to incidents, and ensure CIS Benchmarks are applied to protect networks, systems and data.

The role requires hands-on experience with vulnerability scanning, log analysis and cloud security across Office365, GCP, AWS and Azure, plus strong communication across all levels of the company.

Qualifications

• Bachelor’s degree in Information Technology, Information Security or equivalent with relevant work experience.
• 5–8 years of prior relevant experience in IT security.
• Advanced understanding of TCP/IP, networking ports/protocols, traffic flow and OSI model.
• Hands-on experience analyzing logs, network data and attack artifacts.
• Experience with vulnerability scanning and monitoring solutions.
• Experience with Office365 and Cloud Security (GCP, AWS, Azure).
• Understanding of mobile technologies and OS (Android, iOS, Windows).

Responsibilities

• Monitor and maintain internet, email and web security for the organization.
• Track, monitor, analyze and resolve vulnerabilities or security issues.
• Respond to and resolve security incidents promptly.
• Act as point of contact for security incidents to isolate and remediate.
• Ensure periodic testing of networks and systems for violations and inefficiencies.
• Stay updated on cyber threats and apply CIS Benchmarks.
• Manage user accounts and access controls.
• Develop and maintain IT and cybersecurity frameworks and policies.
• Safeguard network elements including LANs, WANs, VPNs, VLANs and VoIP.
• Monitor network performance, troubleshoot bottlenecks, and educate users on cybersecurity.

Skills

Vulnerability assessments

Incident response

Network security

CIS Benchmarks

Log analysis

TCP/IP understanding

Cloud security

Communication

Security policy awareness

Education

Bachelors in IT/IS

Tools

Vulnerability scanning tools

Log analysis tools

VMware

Job description

• Monitor and maintain the internet, email and web security for entire organization.
• Track, monitor, analyze and resolve any vulnerability or security issue.
• Monitor on new CVE and ensure affected systems are being patched accordingly.
• Respond and resolve any vulnerability or security incident that may arise.
• Act as the point of contact on any security incidents to respond, isolate, remediate, or resolve the incident quickly.
• Ensure periodic testing of the organizations network and systems to determine security violations and inefficiencies.
• Stay up-to-date on the latest cyber threats and to adapt CIS Benchmarks to proactively safeguard any new emerging security risks.
• Manage user accounts and access controls.
• Develop, implement and maintain the IT and Cyber security frameworks, procedures and policies.
• Safeguard all network elements including but not limited to computer networks, local area networks (LANs), wide area networks (WANs), internet connections, intranet, VPNs, VLANs, VoIP and other data communication systems.
• Monitor network performance, identify bottlenecks, and troubleshoot network issues.
• Create user awareness with continuous education on Cybersecurity.

Key Skill Requirements:

• Proficiency in conducting regular vulnerability assessments of the systems to prevent any security incident.
• Awareness of the latest methods used by hackers and malicious elements to break into systems.
• Competency to use the available tools to discover any dubious movement in the network and system.
• Soft skills including effective verbal communication and advanced written with all levels in the company.
• Knowledge of cyber laws and compliance requirements as per the law of the land.
• Ability to conduct an in-depth analysis of computer networks and identify any vulnerabilities in the system. Attention to detail is a fundamental personality trait for this position and able to meet deadlines with minimal supervision.

Qualification and Experiences requirement:

• Bachelors degree in Information Technology (IT), Information Security (IS) or equivalent education with work related experience.
• Minimum 5-8 years of prior relevant experience.
• Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.
• Hands-on experience analyzing high volumes of logs, network data (e.g., Full-Packet Capture FPC), and other attack artifacts in support of incident investigations.
• Experience with vulnerability scanning and monitoring solutions.
• Experience on Office365 and other Cloud Security (e.g., GCP, AWS, Azure).
• Understanding of mobile technology and OS (e.g., Android, Huawei, iOS, Windows), VMware technology is a plus.