IT Security Officer

Phillip Securities; Kuala Lumpur; On-site; MYR 60,000 - 80,000; Full time

Job summary

A financial services company in Kuala Lumpur seeks a Cybersecurity Specialist to co-manage and enhance cybersecurity measures. The role involves monitoring security incidents, maintaining security documentation, and optimizing security tools. Candidates should have a degree in Information Security or Computer Science, at least 3 years of IT security experience, and familiarity with various security tools. The company promotes a proactive cybersecurity culture and is looking for someone reliable and proactive to join their IT team.

Qualifications

• Degree/Diploma in Information Security, Computer Science, or related field.
• At least 3 years of experience in IT security.
• Hands-on experience with security tools such as SIEM & EDR platform.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents.
• Perform maintenance and optimization of information security tools.
• Conduct regular vulnerability scans and track remediation progress.
• Coordinate security assessments with vendors and internal stakeholders.

Skills

Cybersecurity fundamentals

Basic IT infrastructure knowledge

Network technologies (routing, switching)

System administration (Windows/Linux)

Incident handling processes

Regulatory expectations exposure

Proactive task management

Education

Degree/Diploma in Information Security, Computer Science

Tools

SIEM & EDR platform

IDS/IPS

DLP

WAF

Stateful firewall

Job description

Support and co-manage the organization’s cybersecurity controls, including endpoint protection (EDR & SIEM), email and web security, data loss prevention, threat intelligence report and cloud security, ensuring consistent performance and alignment with regulatory requirement & corporate policies.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents.
• Perform routine maintenance and optimization of information security tools, including agent health verification, signature updates, log ingestion, platform health review, and alert tuning.
• Maintain up-to-date operational documentation.
• Coordinate and oversee VAPT performed by external vendors, ensuring findings are addressed and fixes implemented within agreed timelines.
• Conduct regular vulnerability scans, track remediation progress with infrastructure and application owners, and ensure vulnerabilities are addressed within agreed timelines.
• Engage in communication with vendors in order to resolve issues, including coordinating with vendors for the execution of projects.
• Execute, maintain, and enhance IT Security Operating Compliance Manual, ensuring all processes, baselines, and guidelines remain current and effective.
• Work closely with other IT functions and business stakeholders to close identified cybersecurity gaps and support remediation initiatives.
• Assist the IT Team in managing and keeping track of the company’s information technology asset.
• Conduct phishing simulation campaigns and deliver security awareness sessions to promote a strong security culture across the organization.
• Stay updated on emerging threats, security tools, and industry trends, and recommend relevant improvements to strengthen the organization’s cybersecurity posture.
• Assist Senior IT Security Officer in internal and external audits.
• Engage in collaborative efforts with Senior IT Security Officer to conduct a security assessment of the architecture of newly introduced services.

Skill & Competency

• Good grasp of cybersecurity fundamentals.
• Basic knowledge of IT infrastructure, including servers, storage, networking, and endpoint systems.
• Basic knowledge of network technologies such as routing, switching, wireless and VPN solutions.
• Familiar with system administration and maintenance across Windows/Linux and cloud-based environments.
• Exposure to incident handling processes and cybersecurity operations.
• Exposure to regulatory expectations.
• Independent, proactive, and reliable in managing assigned tasks.

Requirements

• Degree/Diploma in Information Security, Computer Science, or related field.
• At least 3 years of experience in IT security.
• Hands‑on experience with security tools such as SIEM & EDR platform, IDS/IPS, DLP, WAF and stateful firewall.
• Relevant certifications (CC, SSCP, GIAC, CCOA, CCSK, CompTIA Security+) will be an advantage.

Be careful – Don’t provide your bank or credit card details when applying for jobs. Don’t transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad.