Manager, Cybersecurity Engineering & Operations

SD Guthrie International; Malaysia; Hybrid; MYR 180,000 - 360,000; Full time

Job summary

SD Guthrie Berhad is seeking an accomplished Cybersecurity Architect to define and maintain the enterprise security architecture across IT, OT and cloud environments. You will lead security strategy, governance and transformation programs while ensuring secure-by-design across initiatives.

The role covers application security, cloud security, security operations, and vendor management, with emphasis on risk alignment to business strategy and regulatory requirements in Malaysia.

Qualifications

• Minimum 10–12 years of cybersecurity experience including leadership, governance and project delivery.
• Knowledge of cybersecurity frameworks, standards and regulatory requirements in Malaysia (PDPA, Bank Negara, ISO 27001).
• Executive-level risk assessment, governance and successful project delivery.

Responsibilities

• Define and maintain enterprise cybersecurity architecture across IT, OT, and cloud environments.
• Lead cybersecurity transformation initiatives from strategy through delivery.
• Oversee SOC operations, incident response and cyber investigations.
• Manage security engineering lifecycle from evaluation to retirement.
• Drive continuous improvement in detection, response, and cyber resilience.

Skills

Leadership

Governance

Strategic thinking

Stakeholder management

Analytical thinking

Education

Bachelor’s/Master’s in Cybersecurity/IT/CS

Certifications: CISM CRISC CISSP CCSK

Tools

SIEM / SOC tooling

SAST/DAST tools

PAM tooling

Cloud security tooling

Job description

Job Description: Job Description: Cybersecurity Architecture & Strategy Define and maintain enterprise cybersecurity architecture across IT, OT, and cloud environments. Establish security design standards, principles, and reference architectures. Act as the technical authority for security architecture designs, control implementations & cybersecurity technology selection Ensure all systems and initiatives are secure-by-design and aligned with business and risk requirements. Lead cybersecurity transformation initiatives from strategy through delivery.

Security Engineering & Technology Management

Own the full lifecycle of cybersecurity technologies starting from technology evaluation, procurement, deployment, optimization, and retirement.

• SIEM / SOC
• Endpoint Security (AV, EDR, XDR)
• PAM (implementation and operations)
• DLP and data security
• Network and cloud security solutions
• Zero Trust and secure access technologies

Ensure solutions are scalable, integrated, and optimized for operational effectiveness. Define engineering standards, implementation patterns, and system integrations.

Application & Cloud Security

Integrate security into SDLC and DevSecOps practices. Oversee application security testing (SAST, DAST, penetration testing). Manage cloud security posture, including identity, access control, encryption, and configuration management.

Security Operations & Incident Response

Lead and manage Security Operations Center (SOC), whether internal or MSSP-based. Oversee threat monitoring and detection, incident response and containment and cyber investigation and root cause analysis. Establish and maintain incident response plans, playbooks, and escalation procedures. Ensure timely remediation and recovery to minimize business impact.

Cyber Analytics & Investigation Execution

Operate and optimize SIEM, threat intelligence, and security analytics platforms. Conduct detailed cyber investigations in accordance with forensic and evidentiary requirements. Produce incident reports, lessons learned, and corrective improvement actions.

Delivery & Vendor Management

Deliver cybersecurity initiatives and projects within scope, timeline, and budget. Manage MSSPs and security vendors from an operational and service delivery perspective. Monitor SLA/KPI performance and ensure service effectiveness and value realization.

Strategic Planning & Continuous Improvement

Define and maintain the cybersecurity technology roadmap aligned with business strategy. Monitor emerging threats, vulnerabilities, and technology trends. Drive continuous improvement in detection and response capabilities, automation and operational efficiency and cyber resilience and maturity. Support long‑term planning, investment prioritization, and capability development.

Education / Professional Qualification

Bachelor’s or master’s degree in Cybersecurity, Information Technology, Computer Science, or related field. Cybersecurity certifications CISM, CRISC, CISSP, CCSK.

Professional Experience

Minimum 10–12 years of experience in cybersecurity, including leadership, governance, and project delivery roles. Knowledge of cybersecurity frameworks, standards, and regulatory requirements relevant to Malaysia (PDPA, Bank Negara, ISO 27001) and the plantation/industrial sector. Proven experience in executive‑level risk assessment, governance, and successful project delivery. Strong coordination, stakeholder management, and decision‑making skills. Excellent analytical, problem‑solving, and strategic thinking abilities.

SD Guthrie Berhad (SD Guthrie) is one of the world’s leading producers of Certified Sustainable Palm Oil (CSPO), representing approximately 12% of the global market share (as of 31 December 2022). We are listed on Bursa Malaysia. Supported by a large institutional base, we are a strategic company of Permodalan Nasional Berhad, Malaysia’s largest unit trust company and our major shareholder. With over two centuries of heritage, SD Guthrie has evolved into an integrated company operating throughout the entire spectrum of the palm oil value chain. Our dedicated workforce of more than 84,000 employees across 12 countries serve customers in over 90 countries worldwide. We operate 234 plantation estates in Malaysia, Indonesia, Papua New Guinea, and the Solomon Islands, supported by 11 refineries globally with a total refining capacity of 4 million metric tonnes per year. Our downstream businesses engage in trading, manufacturing, and sales of a diverse range of palm oil derivatives, including oleochemicals, biodiesel, and nutraceuticals. We are equipped with 5 R&D Centres, 3 Innovation Centres, and 1 Genetic Testing Facility to support our R&D efforts spearheaded by lab scientists, data engineers, and tech innovators. Our focus is on next‑gen robotics and tech-driven solutions for the palm oil and agri‑business sector, alongside renewable energy initiatives. We are the world’s first palm oil company to have our net‑zero GHG emissions reduction targets approved by the Science Based Targets initiative (SBTi). Join us today, as we continue to Unlock Nature's Superpowers.