IT Security Specialist

Asia Recruit; Selangor; On-site; MYR 134,000 - 140,000; Full time

Job summary

Asia Recruit in Malaysia is seeking an experienced IT Security Specialist to strengthen the security posture of our IT infrastructure in Bandar Utama. You will lead day-to-day security operations and respond to cybersecurity incidents to protect critical systems and data.

The role requires 8–12 years in IT security, hands-on with firewalls, SIEM, DLP, NAC, VPN, and Microsoft 365 security, plus Mandarin language ability.

Qualifications

• Minimum 8–12 years of hands-on experience in IT security technologies, IT general controls, and IT processes.
• Strong exposure to security solutions such as firewalls, IDS/IPS, SIEM, DLP, NAC, VPN, endpoint protection, and encryption.
• Proven experience in vulnerability management, patch implementation, log monitoring, and incident handling.
• Experience with Microsoft 365 security components and modern security architectures.
• Demonstrated ability to design, implement, or architect information security solutions.
• Experience in developing security documentation, policies, and procedures.
• Strong analytical, problem-solving, and communication skills.
• Able to work independently, manage multiple priorities, and support after-hours incidents when required.
• Mandarin speaking ability is essential.

Responsibilities

• Oversee security operations, incident response, threat detection, and remediation
• Monitor event logs and security alerts to identify and mitigate risks in real-time
• Conduct vulnerability scans, penetration assessments, and root-cause investigations
• Implement, configure, and optimise IT security systems, tools, and processes
• Ensure compliance with regulatory, legal, and corporate information security policies
• Develop and maintain IT security policies, standards, procedures, and reports
• Lead security awareness initiatives, including training sessions and phishing simulations
• Provide security advisory and guidance to internal stakeholders on risks and controls
• Support internal and external audits and track remediation of security and compliance gaps

Skills

IT security

Threat monitoring

Vulnerability management

Incident handling

Microsoft 365 security

Security architecture

Communication skills

Independent work

Mandarin language

Tools

Firewalls

IDS/IPS

SIEM

DLP

NAC

VPN

Endpoint protection

Encryption

Patch management

Log monitoring

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

IT SECURITY SPECIALIST
Location: Bandar Utama
Salary Range: RM12,000 – RM12,500

A leading financial services organisation is seeking an experienced IT Security Specialist to strengthen and safeguard the security posture of its IT infrastructure. This role is ideal for a seasoned cybersecurity professional who thrives in a technical, hands-on environment and can ensure IT security readiness across applications, networks, servers, and endpoints.

About the Role
In this position, you will lead day-to-day security operations, proactively monitor threats, and respond to cybersecurity incidents to protect business-critical systems and data. You will conduct vulnerability assessments, drive patch management, prepare post-incident reviews, and continuously evaluate and enhance security controls. The role also covers audit and compliance support, including alignment with Bank Negara Malaysia (BNM) information security expectations.

Key Responsibilities

• Oversee security operations, incident response, threat detection, and remediation
• Monitor event logs and security alerts to identify and mitigate risks in real-time
• Conduct vulnerability scans, penetration assessments, and root-cause investigations
• Implement, configure, and optimise IT security systems, tools, and processes
• Ensure compliance with regulatory, legal, and corporate information security policies
• Develop and maintain IT security policies, standards, procedures, and reports
• Lead security awareness initiatives, including training sessions and phishing simulations
• Provide security advisory and guidance to internal stakeholders on risks and controls
• Support internal and external audits and track remediation of security and compliance gaps

Requirements

• Minimum 8–12 years of hands-on experience in IT security technologies, IT general controls, and IT processes
• Strong exposure to security solutions such as firewalls, IDS/IPS, SIEM, DLP, NAC, VPN, endpoint protection, and encryption
• Proven experience in vulnerability management, patch implementation, log monitoring, and incident handling
• Experience with Microsoft 365 security components and modern security architectures
• Demonstrated ability to design, implement, or architect information security solutions
• Experience in developing security documentation, policies, and procedures
• Strong analytical, problem-solving, and communication skills
• Able to work independently, manage multiple priorities, and support after-hours incidents when required
• Mandarin speaking ability is essential

Preferred Background
Candidates with experience in banking, insurance, payment gateway/fintech, or cybersecurity vendors, as well as those currently in Assistant Manager or Senior Specialist security roles, are strongly encouraged to apply.

Career Growth
The position is on a specialist career track, offering opportunities for growth through salary progression and job grade advancement while maintaining a deep technical focus rather than people management responsibilities.