Manager, Cybersecurity & Risk

techstreet; Kuching; On-site; MYR 210,000 - 320,000; Full time

Benefits offered by this job

Health Insurance

Job summary

University in Malaysia seeks a Manager of Cybersecurity and Risk to lead cybersecurity operations, governance, risk and compliance. You will protect digital assets, strengthen cyber resilience, and ensure alignment with security standards and regulatory requirements.

The role requires leadership of the security team, threat monitoring, incident response, and risk management across the enterprise. Strong knowledge of ISO 27001, NIST, COBIT and data privacy is essential.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or related discipline.
• Minimum five (5) years of relevant experience, including at least two (2) years in leadership/management in cybersecurity operations, GRC or information security within a small to medium enterprise.
• Strong knowledge of IT governance, regulatory requirements, risk management and cybersecurity best practices, with practical experience in ISO 27001, NIST and COBIT.
• Proven experience leading enterprise-level IT risk assessments and maintaining a corporate risk register.
• Extensive experience leading cybersecurity incident responses and conducting root cause analysis.
• Hands-on experience with SIEM, next-generation firewalls, EDR, DLP and vulnerability scanners.

Responsibilities

• Develop and implement the University's cybersecurity strategy, policies and long-term security roadmap.
• Oversee security operations, including threat monitoring, endpoint protection, data loss prevention and vulnerability management.
• Lead responses to major cybersecurity incidents, including investigations, root cause analysis, corrective actions and regulatory reporting.
• Conduct enterprise-wide IT risk assessments, maintain the corporate IT risk register and recommend mitigation measures.
• Manage security governance and compliance with frameworks such as ISO 27001, NIST and COBIT, and coordinate internal and external audits.
• Lead and develop the cybersecurity team, monitor performance and promote security awareness and data privacy across the University.
• Manage cybersecurity budgets, resources, technology renewals and relationships with vendors and service providers.
• Provide security advice for digital initiatives and prepare management and board-level reports on cybersecurity performance and risks.

Skills

Leadership

Cybersecurity operations

Risk management

IT governance

Regulatory compliance

Incident response

Education

Bachelor's degree in Computer Science, IT, Cybersecurity or related

Tools

SIEM

Next-gen firewalls

EDR

DLP

Vulnerability scanners

ISO 27001/NIST/COBIT

Job description

The Manager, Cybersecurity and Risk will lead the University's cybersecurity operations and governance, risk and compliance (GRC) functions. Reporting to the Director of Information Technology, this role will protect digital assets, strengthen cyber resilience and ensure alignment with relevant security standards and regulatory requirements.

Key responsibilities

Develop and implement the University's cybersecurity strategy, policies and long-term security roadmap.

Oversee security operations, including threat monitoring, endpoint protection, data loss prevention and vulnerability management.

Lead responses to major cybersecurity incidents, including investigations, root cause analysis, corrective actions and regulatory reporting.

Conduct enterprise-wide IT risk assessments, maintain the corporate IT risk register and recommend mitigation measures.

Manage security governance and compliance with frameworks such as ISO 27001, NIST and COBIT, and coordinate internal and external audits.

Lead and develop the cybersecurity team, monitor performance and promote security awareness and data privacy across the University.

Manage cybersecurity budgets, resources, technology renewals and relationships with vendors and service providers.

Provide security advice for digital initiatives and prepare management and board-level reports on cybersecurity performance and risks.

About you

Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related discipline.

Minimum five (5) years of relevant experience, including at least two (2) years in a leadership or management role in cybersecurity operations, GRC or information security within a small to medium enterprise.

Strong knowledge of IT governance, regulatory requirements, risk management and cybersecurity best practices, with practical experience in ISO 27001, NIST and COBIT.

Proven experience leading enterprise-level IT risk assessments and maintaining a corporate risk register.

Extensive experience leading cybersecurity incident responses and conducting root cause analysis.

Hands-on experience with SIEM, next-generation firewalls, Endpoint Detection and Response (EDR), Data Loss Prevention (DLP) and vulnerability scanners.

Strong leadership, organisational and stakeholder management skills, including experience managing teams, vendors and contractors.

Ability to develop security policies, prepare board-level reports and present clear risk recommendations.

At least two active, relevant IT certifications, including one at professional cybersecurity level, such as CISSP, CRISC, CISA or CISM (highly desirable).

Knowledge of local data protection laws, including PDPA, and experience in higher education (highly desirable).

• Health Insurance