IT Security Operation Lead

Jobtailor; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Jobtailor in Kuala Lumpur is seeking a skilled information security specialist to monitor, detect, and respond to security events across the RDC estate, maintain security tooling, and drive remediation with local and central teams.

You will lead vulnerability management, access reviews, change-related security activities, and produce regular security reporting while keeping abreast of emerging threats and industry standards.

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or a related field.

Responsibilities

• Monitor, operate and maintain the RDC's local security solutions and services.

Skills

Information Security

Incident Response

Vulnerability Scanning

Access Management

Security Monitoring

Python

PowerShell

Education

Bachelor's degree in computer science, information technology, cybersecurity, or a related field

Tools

SIEM platforms

Cloud WAF

IAM tooling

Job description

Responsibilities

• Monitor, operate and maintain the RDC's local security solutions and services
• Detect and act on potential security events and threats
• Own the security ticket queue end to end, including triage, investigation and remediation
• Respond to SOC alerts raised and worked by the Central ACDC Team, validate outcomes and drive remediation to closure
• Execute vulnerability scans across the RDC estate
• Track identified vulnerabilities to closure and report progress to the Central AVM Team
• Prepare, assess and implement security-related changes in line with the change process
• Own local security incident and problem management, coordinating investigation and root-cause analysis
• Process access requests with Central IAM, ACDC and Cloud WAF teams
• Conduct the half-yearly user access review for the RDC
• Act as local owner for Group-provided security solutions and services, aligning requirements and overseeing service quality
• Deliver evidence, control checks and remediation actions for regulatory, compliance and audit requests
• Produce recurring and ad-hoc security reporting for relevant leadership
• Maintain security documentation, runbooks and the RDC knowledge base
• Perform security evaluations of solutions and services jointly with AZT MY ISO and OE ISO
• Support penetration testing in a consulted/informed capacity
• Provide security input and sign-off for projects and participate in demand management
• Keep current with emerging threats and security operations practices
• Propose improvements to local processes, tooling and automation
• Complete other duties and projects as needed

Requirements

• Bachelor's degree in computer science, information technology, cybersecurity, or a related field
• Proven experience in information security, network security, or a related role
• Strong understanding of security principles, practices, and technologies
• Hands-on experience with security monitoring, SIEM/SOC alert handling and incident response tools and technologies
• Practical experience with vulnerability scanning and remediation tracking
• Practical experience with access management and user access reviews, including IAM, cloud and WAF platforms
• Working knowledge of ITIL-based incident, problem and change management
• Comfort operating within a defined RACI across local and central/Group teams
• Proficiency in scripting or programming languages such as Python or PowerShell for automation tasks
• Familiarity with cloud security and security frameworks such as NIST and ISO 27001
• Strong analytical and problem-solving skills
• Excellent communication and interpersonal skills
• Ability to work independently and as part of a team
• Security certifications such as CISSP or CEH are a plus, not required
• Availability to work extended hours or outside regular hours when required by the business, including responding to security incidents or performing scheduled maintenance
• Ability to collaborate with remote teams and vendors

Core Competencies

Demonstrates expertise in information security practices, including incident response, vulnerability management, and access control. Proficient in security monitoring tools and frameworks, with strong analytical skills to drive remediation and compliance efforts.

Highest-signal resume keywords

• Information Security
• Incident Response
• Vulnerability Scanning
• Access Management
• Security Monitoring

Hard Skills

• Security Monitoring
• Incident Response Tools
• Vulnerability Scanning
• Scripting
• Python
• PowerShell
• Access Management
• User Access Reviews
• ITIL Incident Management
• Security Principles

Soft Skills

• Analytical Skills
• Problem-Solving
• Communication
• Interpersonal Skills
• Team Collaboration

Certifications & Qualifications

• CISSP
• CEH

Industry Keywords

• Security Solutions
• Regulatory Compliance
• Audit Requests
• Change Management
• Security Documentation

Tools & Technologies

• SIEM
• SOC
• IAM
• Cloud WAF
• NIST
• ISO 27001