IT Security Officer

Phillip Securities Pte Ltd; Kuala Lumpur; On-site; MYR 70,000 - 90,000; Full time

Job summary

A financial services company in Kuala Lumpur is seeking an experienced IT Security Officer to manage cybersecurity controls and oversee vulnerability assessments. The ideal candidate will have a degree in Information Security or Computer Science and at least 3 years of relevant experience, along with hands-on knowledge of security tools like SIEM & EDR. This role includes engaging in awareness sessions to strengthen cybersecurity culture.

Qualifications

• At least 3 years of experience in IT security.
• Hands-on experience with cybersecurity tools.
• Relevant certifications will be an advantage.

Responsibilities

• Support and co-manage cybersecurity controls.
• Monitor, investigate, and respond to security alerts.
• Perform routine maintenance of security tools.
• Coordinate vulnerability assessments and address findings.
• Conduct security awareness sessions across the organization.

Skills

Good grasp of cybersecurity fundamentals

Basic knowledge of IT infrastructure

Exposure to incident handling processes

Independent and proactive

Education

Degree/Diploma in Information Security, Computer Science, or related field

Tools

SIEM & EDR platform

IDS/IPS

DLP

WAF

Stateful firewall

Job description

Support and co-manage the organization’s cybersecurity controls, including endpoint protection (EDR &SIEM), email and web security, data loss prevention, threat intelligence report and cloud security, ensuring consistent performance and alignment with regulatory requirement & corporate policies.

Monitor, investigate, and respond to security alerts and incidents.

Perform routine maintenance and optimization of information security tools, including:

• Verify agent health, signature updates, and coverage across all assets
• Ensuring complete ingestion of log sources.
• Reviewing platform health and alert tuning.
• Maintaining up-to-date operational documentation

Coordinate and oversee VAPT performed by external vendors, ensuring findings are addressed and fixes implemented within agreed timelines.

Conduct regular vulnerability scans track remediation progress with infrastructure and application owners, and ensure vulnerabilities are addressed within agreed timelines.

Engage in communication with vendors in order to resolve issues, including coordinating with vendors for the execution of projects.

Execute, maintain, and enhance IT Security Operating Compliance Manual, ensuring all processes, baselines, and guidelines remain current and effective.

Work closely with other IT functions and business stakeholders to close identified cybersecurity gaps and support remediation initiatives.

Assist the IT Team in managing and keeping track of the company's information technology asset.

Conduct phishing simulation campaigns and deliver security awareness sessions to promote a strong security culture across the organization.

Stay updated on emerging threats, security tools, and industry trends, and recommend relevant improvements to strengthen the organization’s cybersecurity posture.

Assist Senior IT Security Officer in internal and external audits

Engage in collaborative efforts with Senior IT Security Officer to conduct a security assessment of the architecture of newly introduced services.

Skill & Competency

Good grasp of cybersecurity fundamentals.

Basic knowledge of IT infrastructure, including servers, storage, networking, and endpoint systems.

Basic knowledge of network technologies such as routing, switching, wireless and VPN solutions.

Familiar with system administration and maintenance across Windows/Linux and cloud-based environments.

Exposure to incident handling processes and cybersecurity operations.

Exposure to regulatory expectations.

Independent, proactive, and reliable in managing assigned tasks.

Requirements

Degree/Diploma in Information Security, Computer Science, or related field.

At least 3 years of experience in IT security.

Hands-on experience with security tools such SIEM & EDR platform, IDS/IPS, DLP, WAF and stateful firewall.

Relevant certifications (CC,SSCP, GIAC, CCOA, CCSK, CompTIA Security+) will be an advantage.

Your application will include the following questions:

Which of the following statements best describes your right to work in Malaysia? What's your expected monthly basic salary? Which of the following types of qualifications do you have? How many years' experience do you have as an Information Technology Security Officer?