Senior Cybersecurity & Governance Specialist

Armstrong Asia; Sungai Buloh; On-site; MYR 120,000 - 180,000; Full time

Job summary

Armstrong Asia is seeking a Senior IT CyberSecurity Specialist to act as the group’s senior technical expert in information and cyber security. You will support protection of IT and OT environments, drive threat monitoring, incident response, vulnerability management, and access controls across sites.

Reporting to the Group IDT Director, you will translate security governance into site-level actions, work with stakeholders, and manage security tooling and vendors.

Qualifications

• Experience in security operations and governance within a multinational environment.
• Proven ability to implement and operate security controls and risk management.
• Experience drafting security policy and standards aligned to ISO 27001/NIST CSF.

Responsibilities

• Develop and maintain Group information security policy set, standards, and procedures.
• Conduct cyber risk assessments and track remediation to closure.
• Lead end-to-end investigation and response to security incidents.
• Oversee security tooling and managed-security-service vendors at the operational level.
• Maintain and test the cyber incident response plan and playbooks.
• Define data protection controls and oversee identity and access management.

Skills

Security operations

SIEM/EDR tooling

Incident response

Vulnerability management

Identity and access management

Cloud security

ISO 27001 / NIST CSF

Scripting (PowerShell, Python)

Stakeholder management

Education

Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related discipline

Tools

Microsoft Sentinel

Defender XDR

Splunk

Job description

Armstrong Asia is seeking a Senior IT CyberSecurity Specialist to act as the group’s senior technical expert in information and cyber security. You will support protection of IT and OT environments, drive threat monitoring, incident response, vulnerability management, and access controls across sites.

Reporting to the Group IDT Director, you will translate security governance into site-level actions, work with stakeholders, and manage security tooling and vendors.