Secure Configuration Management Specialist, Cyber Security

Bank Negara Malaysia; Kuala Lumpur; On-site; MYR 150,000 - 200,000; Full time

Job summary

A major financial institution in Kuala Lumpur is seeking a Secure Configuration Management Specialist. The ideal candidate will have at least 7 years of experience in technical infrastructure, cloud technology, and cybersecurity. Responsibilities include leading secure configuration management processes and ensuring compliance with security standards. The role requires strong knowledge of configuration management tools and will offer benefits such as EPF, SOCSO, and annual leaves.

Benefits

EPF

SOCSO

Annual Leaves

Qualifications

• Minimum 7 years working experience with technical infrastructure, cloud technologies, and cybersecurity.
• Strong knowledge of secure configuration management processes and tools.
• IT technical certifications in cyber security such as CISSP, CISA preferred.

Responsibilities

• Lead and operationalize secure configuration management processes.
• Manage secure configuration management tools and their systems lifecycle.
• Conduct research on new secure configuration processes and tools.
• Build strategic relationships with IT security experts to enhance service delivery.

Skills

Technical infrastructure knowledge

Cloud technology expertise

Cybersecurity knowledge

Configuration management tools experience

Education

Degree in Computer Science / Information Technology

Tools

Ansible

Puppet

Tripwire

AWS Security Hub

Azure Defender

Google SCC Cloud Security Posture Management

Job description

Secure Configuration Management Specialist, Cyber Security

• Academic qualifications: Degree in Computer Science / Information Technology or its equivalent.
• IT technical certifications in operating system systems, networking, databases, and any certification in cyber security such as CISSP, CISA is an added advantage.
• Technical knowledge and working experience with operating system, network device, databases, middleware administration, cloud, configuration deployment, enforcement and validation tools such as Ansible, Puppet, Tripwire, Change Tracker, Qualys, Tenable, AWS Security Hub, Azure Defender, Google SCC Cloud Security Posture Management, TerraForm, CNAP, CSPM or IaaC scripting.
• Experience: At least 7 years working experience with strong knowledge in technical infrastructure and cloud technologies and cybersecurity technology, implementation and maintenance.

Responsibility

• Lead, plan, oversee and operationalize secure configuration management processes in terms of development, enhancement, enforcement, and validation of secure configuration baselines and reporting its compliance to management through collaboration with various teams from security architecture, administration, operation, technical infrastructure, application management, cloud management, and technology governance.
• Lead, plan, assess, manage, and support secure configuration management tools that enable secure configuration management processes in terms of its system/tools lifecycle to ensure adherence to technology architecture design, standards and principles, and deliver intended security objectives without major impact to IT operational performance.
• Lead research and development and/or enhancement on new secure configuration management process, tools, and its baselines, risks and threats and assess whether it is relevant and continuously effective to meet the Bank's security objectives and assessment, and work with relevant security and technical team to develop remediation and/or mitigation plan to address any non-compliance or deviation from secure baselines.
• Build and maintain strategic and technical relationship/networking and collaborations with external IT security experts, IT security technology principal and providers and other IT organisations to benchmark and improve the Bank’s IT security service delivery to stakeholders.

Benefits

• EPF
• SOCSO
• Annual Leaves