Manager, Cyber Security

Gentari; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Job summary

The role requires 7+ years in cyber security leadership, strong knowledge of ISO 27001 and NIST, and experience securing IT and OT across international sites. A bachelor’s degree in a relevant field and professional certifications are highly desirable.

Qualifications

• 7+ years of progressive cyber security leadership experience.
• Strong understanding of enterprise security frameworks and compliance standards.
• Experience leading cross-functional teams across geographies.
• Industry certifications (e.g., CISSP, CISM, CISA) are desirable.

Responsibilities

• Lead governance framework development and program delivery for enterprise cyber security.
• Oversee incident response readiness and cross-functional coordination during major events.
• Define cyber security priorities, metrics, and risk appetite for the business.
• Collaborate with IT, OT, and business units to ensure secure, compliant operations across global offices.
• Manage network security design and enforcement for international sites.

Skills

Cyber security management

Cross-functional leadership

Risk management

Incident response

Network security

Education

Bachelor’s degree in Computer Science/Information Security

Tools

ISO 27001/NIST

Firewall/VPN/SOC

Job description

Changing how we live today

to help secure our future.

Join us at Gentari to be part of this exciting, purposeful journey towards a cleaner energy future.

Gentarians are passionate about sustainability - our purpose is to solve the world’s most pressing sustainable energy needs. Here at Gentari, we move differently. Teams seek out opportunities to work with one another to achieve shared goals and we trust our people with the freedom and autonomy in ways of working to spur innovative thinking and creativity. We aim to keep good people at the heart of what we do by ensuring that our people feel empowered to chart career paths alongside personal growth. Beyond the promise of an open and flexible work environment, we hope to make Gentari feel like a second home, a place where everyone is valued, and differences are celebrated.

The Manager, Cyber Security provides strategic leadership and operational oversight for Gentari’s enterprise-wide cyber security posture. This role is accountable for driving the implementation of a robust Cyber Security Governance Framework, safeguarding Gentari’s digital assets, and ensuring alignment with corporate and international compliance requirements.

The incumbent will serve as the primary focal point for all cyber security matters across Gentari’s global operations — shaping strategy, managing execution, and coordinating with internal teams, business units, and external partners to ensure resilient, secure, and trusted operations.

Responsibilities

Cyber Security Governance & Strategy:

• Lead the development, implementation, and continuous improvement of Gentari’s Enterprise Cyber Security Governance Framework;
• Define cyber security priorities, metrics, and risk appetite aligned with Gentari’s business objectives and compliance mandates;
• Monitor emerging cyber threats, technologies, and regulatory requirements to proactively strengthen security posture;
• Champion a culture of cyber awareness, accountability, and risk ownership across all levels of the organization;
• Work collaboratively with PETRONAS Group Enterprise Cyber Security team on cyber security governance framework and enterprise cyber security program requirement and compliance.

Enterprise Cyber Defence & Program Delivery:

• Drive the rollout of enterprise cyber defence programs and RTOT (Resilience, Threat, and Operational Technology) initiatives in close collaboration with key stakeholders;
• Ensure coordinated implementation of preventive, detective, and responsive controls across business systems and assets;
• Oversee incident response readiness and lead cross-functional coordination during major cyber events or audits.

Infrastructure Security & Network Architecture:

• Lead network security and private network establishment for Gentari international offices to enable secure SOC (Security Operations Centre) onboarding;
• Provide architectural oversight and technical direction for infrastructure and network security design across international offices;
• Manage firewall, VPN, and endpoint security lifecycle to ensure business continuity and resilience.

Application Security & Integration:

• Oversee secure integration of third-party and operational technology (OT) systems with enterprise identity and access management environments;
• Lead OAuth 2.0 migration and authentication security for multi-function services and applications across international sites;
• Ensure all enterprise applications meet compliance, identity management, and data protection standards.

Compliance, Audit & Risk Management:

• Oversee cyber security baseline assessments and related compliance programs across organizational operations;
• Ensure security policies and controls align with enterprise corporate frameworks and international standards (e.g., ISO 27001, NIST, GDPR);
• Partner with internal and external auditors to manage cyber risk reviews, remediation, and governance reporting.

Operational Technology & Regional Support

• Provide infrastructure and IT security support for international offices (Singapore, India, Australia), covering AV systems, end-user devices, and local network infrastructure;
• Oversee vendor and service provider performance to ensure secure and efficient IT operations;
• Advise on infrastructure design and implementation for new projects, ensuring integration of cyber controls from inception.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field;
• Minimum 7 years of progressive experience in cyber security management, with exposure to both IT and OT environments;
• Strong understanding of enterprise security frameworks, identity management, network security, and compliance standards;
• Proven ability to lead cross-functional teams and manage large-scale security initiatives across geographies;
• Industry certifications (e.g., CISSP, CISM, CISA, ISO 27001 Lead Implementer) are highly desirable.