Senior Associate, Digital Technology and Security

Sepang Aircraft Engineering Sdn Bhd; Sepang; On-site; MYR 80,000 - 100,000; Full time

Job summary

A leading aerospace company in Sepang is seeking a Senior Associate in Digital Technology and Security. Responsibilities include cyber threat detection, security operations, compliance with ISO standards, and managing security infrastructure. Ideal candidates will have experience in IT security management and incident response, ensuring business continuity during incidents. Competitive salary and benefits are offered.

Qualifications

• Experience in cyber security and IT threat management is essential.
• Knowledge of security incident response processes.
• Familiarity with business continuity planning and disaster recovery solutions.

Responsibilities

• Monitor day-to-day security operations and controls.
• Develop and maintain incident response strategies.
• Conduct audits to ensure compliance with security standards.
• Manage risk assessment and mitigation processes.

Skills

Cyber threat detection

IT security management

Risk assessment

Incident response

Compliance with ISO 270001

Tools

Security assessment tools

Incident response tools

Job description

Senior Associate, Digital Technology and Security

Responsible for cyber and IT threat detection and response, security assessments and audits, manage security infrastructure, develop and enforce policy, manage incident and risk.

Primary Responsibilities

Security Operation Management

Perform day–to-day security monitoring, operations to ensure that implemented security controls are efficient and compliance with policies, standards and guidelines.

Deploy, administer and support information security tools.

Security Incidents Management

Define IT security incident response process, support in incident investigation, collection of evidence for incident response and remediation of security incidents.

Security Compliance Management

Support and maintain the vulnerability and compliance assessment tools and processes.

Analyze the mitigation controls and follow-up their progress with Digital operation teams.

Security Project Management

Provide IT security consultation and risk assessment to ensure that security elements are identified and implemented throughout the project lifecycle.

Coordinate with Digital operation teams and business owners to provide optimal solutions on all information security processes and maintains the technology.

Detection and Response Management

Monitor and respond to incidents and threat.

Lead root cause analysis and post-incident reviews to strengthen future defense.

Infrastructure Protection

Oversee security of servers, cloud platform, endpoints.

Implement patch management and hardening protocols across infrastructure assets.

Business Continuity Planning (BCP)

Develop and maintain plans to ensure business operations can continue during and after a security incident.

Backup and Disaster Recovery (BDR)

Implement and manage backup and recovery solutions.

Security Audit

Conduct internal audit of ISMS and ensure compliance with ISO 270001 standards.

Prepare reports and recommend improvement.

Other duties reasonably determined from time to time by the Company.