IT Security Supervisor

Petron Malaysia Refining & Marketing Bhd; Kuala Lumpur; On-site; MYR 120,000 - 160,000; Full time

Job summary

A leading Asian oil company is seeking a cybersecurity leader to enhance its security posture. This role involves overseeing the Security Operations Center and incident response strategies, as well as developing comprehensive security policies that comply with standards such as NIST and ISO 27001. Candidates should have a Bachelor's degree in a relevant field and extensive experience in cybersecurity management. Strong leadership and communication skills are essential. Based in Kuala Lumpur, this position offers the opportunity to lead initiatives that address critical IT security challenges.

Qualifications

• Minimum 8-10 years’ experience in a similar role.
• Knowledge of IT security technologies and controls.
• Experience in developing or implementing IT policies, standards, and procedures.

Responsibilities

• Provide leadership to shift to a proactive cybersecurity posture.
• Lead the Security Operations Center and oversee incident response.
• Develop and implement organization-wide security policies.

Skills

Leadership in cybersecurity

Knowledge of NIST

Information Security Management System

Risk assessment

Strong written and verbal communication skills

Time management

Education

Bachelor’s Degree in Computing/Information Technology/Computer Security

Job description

Petron Malaysia is an emerging and rapidly evolving Asian oil company. It is part of Petron Corporation which is the leading oil company in the Philippines. Our integrated refining, distribution, and retailing of world‑class petroleum products help meet the country’s growing energy needs and contribute to a more progressive nation. We are dedicated and passionate about our vision – to be the leading provider of total customer solutions in the oil sector and its allied businesses.

Responsibilities

• Provide dedicated leadership to shift from a reactive to a proactive cybersecurity posture
• Address the current fragmented IT security responsibilities across IT team
• Lead the Security Operations Center (SOC) and oversee incident response strategy and escalation protocols
• Develop and implement organization wide security policies and procedures
• Direct threat intelligence and risk assessment initiatives
• Manage vendor relationships and coordinate with external security partners
• Establish and maintain security awareness training and compliance programs
• Measure and improve SOC performance and security processes
• Ensure governance and compliance with key standards: NIST, ISO 27001, PDPA, SOC 1 Type II, PCI DSS and others

Qualifications

• Bachelor’s Degree in Computing/Information Technology/Computer Security
• Minimum 8‑10 years’ experience in similar role
• Knowledge in Information Security Management System (ISMS) framework, compliance and risk assessment
• Knowledge of IT security technologies and controls
• Familiar with NIST, ISO 27001, PCI DSS
• Experience in developing or implementing IT policies, standards, and procedures
• Experience in identification, evaluation, management, and monitoring of risk
• Experience in project coordination for IT projects
• Ability to carry out investigations on security incidences as well as document findings; hence it is essential that you can define problems, collect data, establish facts, and draw valid conclusions
• Strong written and verbal communication skills
• Good time management