Manager, Cybersecurity and Risk

Hireon; Kuching; On-site; MYR 89,000 - 156,000; Full time

Job summary

Hireon is seeking a senior cybersecurity leader in Kuching, Sarawak to head our cybersecurity, risk, and compliance functions. You will shape strategy, governance, and roadmaps while overseeing security operations and incident response.

The role requires 5+ years in cybersecurity with leadership experience and hands-on expertise across SIEM, EDR, DLP, and framework compliance. A strong track record in vendor management and policy development is essential.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• Minimum 5 years in cybersecurity, GRC, or information security, incl. 2+ years in leadership.
• Strong knowledge of ISO 27001, NIST, COBIT, governance, risk, and compliance.
• Hands-on experience with SIEM, EDR, DLP, firewalls, vulnerability mgmt, and IR.
• Professional certifications (CISSP, CISM, CISA, CRISC, CEH, Security+, PMP/PRINCE2) desirable.
• Proven leadership, vendor mgmt, strategic planning, stakeholder engagement.
• Experience in higher education environments is a plus.

Responsibilities

• Lead and manage cybersecurity, information security, risk, and compliance functions.
• Develop and implement cybersecurity strategy, governance frameworks, and roadmaps.
• Oversee security operations including SIEM monitoring, EDR, DLP, firewalls, and incident response.
• Lead enterprise-wide IT risk assessments and maintain risk registers.
• Serve as Incident Response Lead during cybersecurity incidents and breaches.
• Develop and review cybersecurity policies, standards, procedures, and governance controls.
• Manage compliance with ISO 27001, NIST, COBIT, and PDPA.
• Prepare board reports, security metrics, risk assessments, and updates.
• Manage cybersecurity budgets, vendors, contracts, and team performance.
• Promote a security-conscious culture through awareness initiatives.

Skills

Leadership

Stakeholder engagement

Strategic planning

Vendor management

Cybersecurity governance

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SIEM

EDR

DLP

Firewalls

ISO 27001

NIST

COBIT

Job description

SALARY RANGE: RM 8,000 - RM 14,000

Key Responsibilities

• Lead and manage cybersecurity, information security, risk, and compliance functions.
• Develop and implement cybersecurity strategy, governance frameworks, and long-term security roadmaps.
• Oversee security operations, including SIEM monitoring, EDR, DLP, firewalls, vulnerability management, and incident response.
• Lead enterprise-wide IT risk assessments and maintain corporate risk registers.
• Serve as Incident Response Lead during cybersecurity incidents and major security breaches.
• Develop, implement, and review cybersecurity policies, standards, procedures, and governance controls.
• Manage compliance with frameworks and standards such as ISO 27001, NIST, COBIT, and PDPA.
• Prepare board-level reports, security metrics, risk assessments, and management updates.
• Manage cybersecurity budgets, vendors, service providers, contracts, and team performance.
• Promote a security-conscious culture through awareness and risk management initiatives.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related discipline.
• Minimum 5 years of relevant cybersecurity, GRC, or information security experience, including at least 2 years in a leadership or management role.
• Strong knowledge of ISO 27001, NIST, COBIT, cybersecurity governance, risk management, and compliance frameworks.
• Hands-on experience with SIEM, EDR, DLP, firewalls, vulnerability management, and incident response.
• Professional certifications such as CISSP, CISM, CISA, CRISC, CEH, Security+, PMP, PRINCE2, or equivalent are highly desirable.
• Strong leadership, vendor management, strategic planning, and stakeholder engagement skills.
• Experience in higher education environments will be an advantage.