IT Security Officer

Phillip Securities; Kuala Lumpur; On-site; MYR 80,000 - 120,000; Full time

Job summary

A financial services firm in Kuala Lumpur seeks a Cybersecurity Specialist to support and co-manage cybersecurity controls, respond to alerts, and conduct vulnerability scans. Candidates should have at least 3 years of IT security experience and a relevant degree. Familiarity with security tools like SIEM and EDR is essential. The role involves significant collaboration with vendors and internal teams to enhance security measures.

Qualifications

• At least 3 years of experience in IT security.
• Hands-on experience with security tools.
• Relevant certifications like CC, SSCP, GIAC, etc. will be an advantage.

Responsibilities

• Support and co-manage cybersecurity controls.
• Monitor and respond to security alerts.
• Coordinate VAPT with external vendors.
• Conduct regular vulnerability scans and track remediation.
• Assist in managing IT assets.

Skills

Good grasp of cybersecurity fundamentals

Basic knowledge of IT infrastructure

Basic knowledge of network technologies

Familiar with system administration and maintenance

Exposure to incident handling processes

Independent and proactive

Education

Degree/Diploma in Information Security, Computer Science, or related field

Tools

SIEM

EDR platform

IDS/IPS

DLP

WAF

Stateful firewall

Job description

Support and co-manage the organization’s cybersecurity controls, including endpoint protection (EDR & SIEM), email and web security, data loss prevention, threat intelligence report and cloud security, ensuring consistent performance and alignment with regulatory requirement & corporate policies.

Monitor, investigate, and respond to security alerts and incidents.

Perform routine maintenance and optimization of information security tools, including:

Verify agent health, signature updates, and coverage across all assets

Ensuring complete ingestion of log sources.

Reviewing platform health and alert tuning.

Maintaining up-to-date operational documentation

Coordinate and oversee VAPT performed by external vendors, ensuring findings are addressed and fixes implemented within agreed timelines.

Conduct regular vulnerability scans track remediation progress with infrastructure and application owners, and ensure vulnerabilities are addressed within agreed timelines.

Engage in communication with vendors in order to resolve issues, including coordinating with vendors for the execution of projects.

Execute, maintain, and enhance IT Security Operating Compliance Manual, ensuring all processes, baselines, and guidelines remain current and effective.

Work closely with other IT functions and business stakeholders to close identified cybersecurity gaps and support remediation initiatives.

Assist the IT Team in managing and keeping track of the company's information technology asset.

Conduct phishing simulation campaigns and deliver security awareness sessions to promote a strong security culture across the organization.

Stay updated on emerging threats, security tools, and industry trends, and recommend relevant improvements to strengthen the organization’s cybersecurity posture.

Assist Senior IT Security Officer in internal and external audits

Engage in collaborative efforts with Senior IT Security Officer to conduct a security assessment of the architecture of newly introduced services.

Skill & Competency

Good grasp of cybersecurity fundamentals.

Basic knowledge of IT infrastructure, including servers, storage, networking, and endpoint systems.

Basic knowledge of network technologies such as routing, switching, wireless and VPN solutions.

Familiar with system administration and maintenance across Windows/Linux and cloud-based environments.

Exposure to incident handling processes and cybersecurity operations.

Exposure to regulatory expectations.

Independent, proactive, and reliable in managing assigned tasks.

Requirements

Degree/Diploma in Information Security, Computer Science, or related field.

At least 3 years of experience in IT security

Hands-on experience with security tools such SIEM & EDR platform, IDS/IPS, DLP, WAF and stateful firewall.

Relevant certifications (CC,SSCP, GIAC, CCOA, CCSK, CompTIA Security+) will be an advantage.