IT Manager

Jobstreet Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 420,000; Full time

Job summary

Jobstreet Malaysia is seeking an experienced IT leader to develop and implement IT strategy, governance, and risk management across the company. You will align policies and standards with business needs, oversee budgets, vendors, and regulatory compliance, and provide management with proactive recommendations on technology priorities.

You will drive ISO/IEC 27001 ISMS efforts, strengthen security across Microsoft 365, cloud, endpoints and networks, lead an IT team, and collaborate with DX on

Qualifications

• Bachelor's degree in Computer Science (or equivalent combination of education/experience).
• 8-10 years of IT experience with exposure to Infrastructure, IT Operations, Cybersecurity and Vendor Management.
• Proven people leadership experience managing technical teams.
• Strong stakeholder management and project delivery skills.

Responsibilities

• Develop and implement IT strategies, policies, and standards aligned with business needs.
• Lead cybersecurity strategy, incident response and risk reduction efforts.
• Oversee IT infrastructure, networks, cloud services, and Microsoft 365 environment.
• Coordinate ISMS activities and maintenance towards ISO/IEC 27001 certification.
• Collaborate with DX and business units on digital transformation initiatives.
• Lead IT team leadership and drive continuous improvement and governance.

Skills

IT leadership

Infrastructure

IT Operations

Cybersecurity

Vendor management

Stakeholder management

Project delivery

Education

Bachelor's in CS

Job description

IT Strategy & Governance

• Develop and implement IT strategies, policies, standards and improvement plans aligned with business requirements.
• Establish a structured and proactive approach to IT management and risk management.
• Advise Management on IT risks, technology priorities, investments and improvement opportunities.
• Manage IT budgets, resources, vendors and service providers.
• Ensure compliance with legal and regulatory requirements.

Cybersecurity & Information Security

• Develop and continuously improve the Company’s cybersecurity strategy, controls and security architecture.
• Proactively identify cybersecurity risks, vulnerabilities and control gaps before incidents occur.
• Maintain up-to-date knowledge of emerging cyber threats, technologies and security solutions available in the market.
• Regularly assess whether the Company’s existing security controls and technologies remain adequate for its risk profile and business requirements.
• Evaluate whether identified gaps should be addressed through improved configuration, enhancement of existing platforms, process improvements or additional security solutions.
• Research, compare and recommend suitable cybersecurity products and services based on security effectiveness, integration, cost, maintainability and operational impact.
• Review and strengthen security controls relating to Microsoft 365, email, cloud services, identity and access management, endpoints, networks, firewalls, data protection, backup and third-party access.
• Lead cybersecurity incident response, root-cause analysis and preventive actions.
• Coordinate vulnerability assessments, security reviews, penetration testing and implementation of approved security improvements where appropriate.
• Provide Management with independent technical recommendations on cybersecurity risks, priorities and required investments.

ISO/IEC 27001 & ISMS

• Lead the development, implementation and continuous improvement of the Company’s ISMS aligned with ISO/IEC 27001.
• Coordinate information security risk assessments, risk treatment plans, policies, procedures and controls.
• Support internal assessments, management reviews and external audits.
• Coordinate information security awareness and training.
• Support the Company’s roadmap towards ISO/IEC 27001 certification, subject to Management direction.

IT Infrastructure & Operations

• Oversee the Company’s IT infrastructure, networks, cloud services, Microsoft 365 environment, devices and related systems.
• Ensure secure, reliable and efficient IT operations
• Oversee access management, endpoint management, system configuration, patching, backup and disaster recovery.
• Ensure technical issues are properly analyzed, resolved and prevented from recurring.
• Maintain appropriate IT documentation, asset management and lifecycle planning.

Business Systems & Collaboration with DX

• Collaborate with the Corporate Planning Department and DX team on digital transformation initiatives.
• Provide technical, cybersecurity, infrastructure and integration advice during evaluation of new software and digital solutions.
• Identify technical and cybersecurity risks associated with proposed systems and recommend appropriate measures.
• Lead or coordinate the IT-related implementation of approved systems, including configuration, security, access management, integration and deployment.
• Ensure new systems comply with Company IT standards, cybersecurity requirements and ISMS requirements.

Project & Stakeholder Support

• Establish consistent IT and cybersecurity standards across project sites.
• Review client or project-specific IT and cybersecurity requirements and advise on appropriate implementation.
• Support responses to client cybersecurity questionnaires, assessments and audits.
• Participate in client cybersecurity discussions where technical expertise is required.Maintain appropriate evidence and documentation to demonstrate the Company’s information security controls.

IT Team Leadership

• Lead, supervise and develop the Company’s IT team.
• Establish clear roles, responsibilities and performance expectations.
• Improve the team’s technical and cybersecurity capability through coaching and training.
• Promote a proactive and continuous-improvement culture.
• Reduce unnecessary dependency on external vendors for routine IT decision-making while maintaining appropriate specialist support.
  

About you

• Bachelor's degree in Computer Science (or equivalent combination of education/experience)
• 8 - 10 years of IT experience with strong exposure to Infrastructure, IT Operations, Cybersecurity, and Vendor Management
• Proven people leadership experience managing technical teams
• Strong stakeholder management and project delivery skills