IT Manager

Private Advertiser; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Benefits offered by this job

—

Job summary

Private Advertiser is seeking an senior IT and cybersecurity leader based in Kuala Lumpur to drive IT strategy, governance, and ISMS alignment with ISO/IEC 27001. You will oversee infrastructure, cloud services, and vendor relationships while guiding risk-driven decision-making and security improvements.

The role requires 8–10 years of relevant experience, strong leadership, stakeholder management, and a track record in project delivery and regulatory compliance.

Qualifications

• Bachelor’s degree in Computer Science or equivalent.
• 8–10 years IT experience in Infrastructure, IT Operations, Cybersecurity, and Vendor Management.
• Proven people leadership experience managing technical teams.
• Strong stakeholder management and project delivery skills.

Responsibilities

• Develop and implement IT strategies, policies, standards and improvement plans aligned with business requirements.
• Establish a structured and proactive approach to IT management and risk management.
• Advise Management on IT risks, technology priorities, investments and improvement opportunities.
• Manage IT budgets, resources, vendors and service providers.
• Ensure compliance with legal and regulatory requirements.
• Develop and continuously improve the Company’s cybersecurity strategy, controls and security architecture.
• Lead cybersecurity incident response, root-cause analysis and preventive actions.
• Coordinate information security risk assessments, risk treatment plans, policies, procedures and controls.
• Oversee IT infrastructure, networks, cloud services, Microsoft 365 environment, devices and related systems.
• Ensure secure, reliable and efficient IT operations.
• Coordinate information security awareness and training.
• Support ISO/IEC 27001 certification efforts.

Skills

IT Leadership

Cybersecurity

Vendor Management

Stakeholder Management

Project Delivery

ISO 27001

Education

Bachelor's degree in Computer Science

Job description

• Develop and implement IT strategies, policies, standards and improvement plans aligned with business requirements.
• Establish a structured and proactive approach to IT management and risk management.
• Advise Management on IT risks, technology priorities, investments and improvement opportunities.
• Manage IT budgets, resources, vendors and service providers.
• Ensure compliance with legal and regulatory requirements.
• Develop and continuously improve the Company’s cybersecurity strategy, controls and security architecture.
• Proactively identify cybersecurity risks, vulnerabilities and control gaps before incidents occur.
• Maintain up-to-date knowledge of emerging cyber threats, technologies and security solutions available in the market.
• Regularly assess whether the Company’s existing security controls and technologies remain adequate for its risk profile and business requirements.
• Evaluate whether identified gaps should be addressed through improved configuration, enhancement of existing platforms, process improvements or additional security solutions.
• Research, compare and recommend suitable cybersecurity products and services based on security effectiveness, integration, cost, maintainability and operational impact.
• Review and strengthen security controls relating to Microsoft 365, email, cloud services, identity and access management, endpoints, networks, firewalls, data protection, backup and third-party access.
• Lead cybersecurity incident response, root-cause analysis and preventive actions.
• Coordinate vulnerability assessments, security reviews, penetration testing and implementation of approved security improvements where appropriate.
• Provide Management with independent technical recommendations on cybersecurity risks, priorities and required investments.
• Lead the development, implementation and continuous improvement of the Company’s ISMS aligned with ISO/IEC 27001.
• Coordinate information security risk assessments, risk treatment plans, policies, procedures and controls.
• Support internal assessments, management reviews and external audits.
• Coordinate information security awareness and training.
• Support the Company’s roadmap towards ISO/IEC 27001 certification, subject to Management direction.
• Oversee the Company’s IT infrastructure, networks, cloud services, Microsoft 365 environment, devices and related systems.
• Ensure secure, reliable and efficient IT operations
• Oversee access management, endpoint management, system configuration, patching, backup and disaster recovery.
• Ensure technical issues are properly analyzed, resolved and prevented from recurring.
• Maintain appropriate IT documentation, asset management and lifecycle planning.
• Collaborate with the Corporate Planning Department and DX team on digital transformation initiatives.
• Provide technical, cybersecurity, infrastructure and integration advice during evaluation of new software and digital solutions.
• Identify technical and cybersecurity risks associated with proposed systems and recommend appropriate measures.
• Lead or coordinate the IT-related implementation of approved systems, including configuration, security, access management, integration and deployment.
• Ensure new systems comply with Company IT standards, cybersecurity requirements and ISMS requirements.
• Establish consistent IT and cybersecurity standards across project sites.
• Review client or project-specific IT and cybersecurity requirements and advise on appropriate implementation.
• Support responses to client cybersecurity questionnaires, assessments and audits.
• Participate in client cybersecurity discussions where technical expertise is required.
• Maintain appropriate evidence and documentation to demonstrate the Company’s information security controls.
• Lead, supervise and develop the Company’s IT team.
• Establish clear roles, responsibilities and performance expectations.
• Improve the team’s technical and cybersecurity capability through coaching and training.
• Promote a proactive and continuous-improvement culture.
• Reduce unnecessary dependency on external vendors for routine IT decision-making while maintaining appropriate specialist support.

About you

• Bachelor's degree in Computer Science (or equivalent combination of education/experience)
• 8 - 10 years of IT experience with strong exposure to Infrastructure, IT Operations, Cybersecurity, and Vendor Management
• Proven people leadership experience managing technical teams
• Strong stakeholder management and project delivery skills

Unlock job insights

Hirer responsiveness Salary match Number of applicants