SENIOR CYBERSECURITY ADVISOR

CelcomDigi Bhd; Subang Jaya; Presencial; MYR 180.000 - 280.000; Jornada completa

Descripción de la vacante

CelcomDigi Berhad is seeking a Senior Cybersecurity Advisor to shape and implement a defendable security architecture across IT, telecoms and multi-cloud environments including AWS and Azure. You will guide information security policies, regulatory compliance and data protection initiatives in partnership with legal and compliance teams while promoting security awareness across the organization.

The role requires deep telecom security and cloud security expertise, hands-on experience with

Formación

• Minimum 8 years in cybersecurity with cloud experience (2+ years in cloud security).
• Experience in telecom security and DevSecOps is preferred.
• Hands-on deployment of IT and telecom security services (networks, endpoints, data, identity).
• Leadership in on-premise and cloud security frameworks and methodologies.
• Strong knowledge of ISO 27001, NIST CSF, RMF, PCI-DSS and related standards.
• Familiar with Cyber Security Act 2024 and regulatory requirements.
• Excellent communication and collaboration across teams.

Responsabilidades

• Lead design and implementation of defendable cybersecurity architecture and Zero Trust model.
• Provide advisory services to internal stakeholders ensuring TSOC compliance during RFP/RFQ stages.
• Enforce security policies and complete Digital Cybersecurity Checklist for new and ongoing projects.
• Collaborate with NEO and business units to rollout secure products and solutions.
• Identify and evaluate security tools to enhance cyber resilience across layers.
• Monitor emerging threats and communicate risks to cross-functional teams.
• Develop tailored Cybersecurity Awareness sessions for internal teams.
• Support architecture, engineering, cyber defense and GRC in planning and incident response.

Conocimientos

Cybersecurity leadership

Cloud security

Security architecture

Regulatory compliance

Stakeholder engagement

Threat monitoring

Security awareness

Educación

Bachelor’s degree in Telecommunication Information Technology Cybersecurity or related field

Certifications: CISSP CCSP CISM AWS Security+

Descripción del empleo

Job Description

As a Senior Cybersecurity Advisor, you will play a pivotal role in shaping and implementing the organization’s security architecture, focusing on a defendable framework incorporating zero trust principles across IT, telecommunications and multi-cloud environments including AWS and Azure. You will act as a trusted expert, providing guidance on information and cloud security policies, compliance with regulatory requirements and ensuring alignment with CelcomDigi's security principles. Your advisory scope extends to supporting data protection and privacy initiatives in partnership with legal and compliance teams, alongside raising security awareness across internal departments to foster a culture of robust security practices.

Responsibilities

• Lead the strategic planning and implementation of a defendable cybersecurity architecture and Zero Trust security model tailored to the organization’s diverse infrastructure, including telecommunications, IT systems, and cloud services to enhance security posture and maturity.
• Serve as a subject matter expert providing detailed advisory services to internal stakeholders such as the Network Engineering (NEO), Project Management Office (PMO), ensuring security controls and measures meet the Technical Statement of Compliance (TSOC) requirements during the RFP/RFQ stages.
• Oversee the enforcement and adherence to security policies and digital cybersecurity guidelines, facilitating the completion of the Digital Cybersecurity Checklist (DCC) for all new business initiatives and ongoing operational projects (BAU) to guarantee security compliance before go-live and deployment.
• Collaborate closely with the Network Engineering (NEO) team and enterprise-wide business units to support the rollout of security products and solutions, ensuring full alignment with organizational security principles, compliance mandates and industry standards.
• Identify, evaluate and recommend innovative security tools and technologies that support comprehensive cyber resilience across organizational layers, actively managing and mitigating evolving cyber threats.
• Continuously monitor and communicate emerging cybersecurity threats, trends and vulnerabilities to cross-functional teams, promoting proactive risk management and mitigation strategies.
• Develop and deliver tailored Cybersecurity Awareness sessions to internal teams, enhancing understanding of security processes, protocols and best practices necessary to minimize risk exposure.
• Support Cybersecurity Architecture, Engineering, Cyber Defense, and Governance, Risk and Compliance (GRC) teams in strategic planning, audit readiness, incident management and response activities to reinforce the organization’s security defenses.
• Collaborate with Cybersecurity Engineering to facilitate the secure rollout and operationalization of both new and business-as-usual technology projects, ensuring security is embedded throughout the lifecycle.

Requirements

• Bachelor’s degree in Telecommunication, Information Technology, Computer Science, Cybersecurity, equivalent discipline or having substantial related experience in technology and Cybersecurity.
• Possession of recognised security certifications such as CISSP, CCSP, CISM, or AWS Security certificate will be highly preferred and considered a strong advantage.
• Min 8 years of experience in the cybersecurity domain including at least 2 years of cloud security environments.
• Experience within telecommunications security and/or DevSecOps practices is preferred, demonstrating an understanding of industry-specific security challenges and solutions.
• Proven hands‑on expertise in the deployment and enablement of information technology and telecommunication security services, encompassing networks (4G/5G), endpoint, data and identity security as well as cyber threat and incident management.
• A demonstrated leadership role encompassing both technical and strategic aspects of on-premise and cloud security frameworks, tools and methodologies.
• Strong commitment to staying updated on the latest cybersecurity technologies, industry trends and evolving threat landscapes particularly within the telecom sector.
• Excellent communication and interpersonal skills, essential for fostering collaboration among diverse teams and delivering effective security guidance and training.
• Extensive knowledge of information security standards, frameworks and best practices, including but not limited to ISO 27001, NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), CIS Controls, Data Protection Act (DPA), PCI‑DSS, GSMA FS.31, MCMC INSG, ENISA guidelines, ITU‑T standards and relevant cybercrime legislation.
• Familiar with current cybersecurity legislation such as the Cyber Security Act 2024 and related regulatory and law enforcement requirements to ensure ongoing compliance across organizational security practices.

About Us

At CelcomDigi, we aspire to be Malaysia’s leading telco‑tech company — the nation’s digital growth engine — powering transformation through 5G, AI, and innovation that impacts over 20 million customers. Here, your role goes beyond work. It’s about enabling businesses to thrive, connecting communities, and advancing society, as we build a brand rooted in trust, reliability and customer excellence. Aligned with our employer value proposition, Grow with Purpose. Build with Trust, you’ll have the opportunity to innovate responsibly and create digital solutions that truly make a difference. If you're driven, future focused, and ready to be part of something bigger, we want you on our team.

CelcomDigi is an equal opportunity employer, and committed to promote employment practices that are transparent, objective and fair.