Senior Executive, Network Security Compliance

Malaysian Communications and Multimedia Commission; Cyberjaya; On-site; MYR 150,000 - 200,000; Full time

Job summary

A leading regulatory body is looking for a Compliance Officer in Cyberjaya to develop and implement compliance strategies. The role involves evaluating network security, organizing audits, and ensuring adherence to standards to protect digital assets. Ideal candidates should have a relevant degree and significant experience in the regulatory field, with strong problem-solving and analytical skills.

Qualifications

• Minimum 5-9 years in regulatory or cyber security.
• Experience in Information Security Audit/Compliance is a plus.
• Candidate must be willing to work independently and under pressure.

Responsibilities

• Formulate and implement compliance strategies.
• Conduct regular audits of systems to assess security standards.
• Collaborate with stakeholders to enhance compliance awareness.

Skills

Problem-solving

Analytical Thinking

Stakeholder Management

Customer Orientation

Attention to details

Education

Bachelor’s Degree in Telecommunication, IT, or Computer Science

Tools

Risk Assessment Tools

Compliance Frameworks

Project Management Tools

Job description

Job Summary

Responsible for compliance strategy and planning regulatory frameworks and related instruments. This role is crucial for enhancing the security, resiliency, and reliability of network infrastructure and services, including Critical Network Information Infrastructure. The incumbent will also operationalize strategic initiatives to safeguard the nation's digital assets, protect consumer interests and align with the National Policy Objectives outlined in the Communications and Multimedia Act 1998 (CMA98).

Job Responsibilities:

• Formulate and implement comprehensive strategies to enhance compliance with security policies, regulatory frameworks, and industry standards.

• Design and maintain a robust compliance framework that addresses legal, regulatory, and operational requirements specific to network security.

• Support the development of policies and procedures that ensure compliance with the Regulatory Code of Practice; monitor their effectiveness regularly.

• Lead risk assessment initiatives to identify vulnerabilities in network security; develop strategies for risk mitigation.

• Collaborate with internal and external stakeholders to promote compliance awareness and foster a culture of security.

• Evaluate emerging technologies for their impact on compliance; ensure technology implementations support regulatory adherence.

• Establish metrics to assess the maturity of compliance initiatives; review progress and implement improvements as necessary.

• Drive continuous improvement efforts by analyzing compliance trends, identifying gaps, and implementing best practices across the organization.

• Oversee the execution of operational procedures to ensure ongoing compliance with established security policies across all industry players.

• Conduct regular audits of systems and processes to assess adherence to security standards; compile findings into actionable reports for management.

• Manage risk assessments to identify vulnerabilities within network operations; develop actionable strategies for risk mitigation.

• Collaborate with MCMC licensees to ensure all technological implementations align with security policies.

• Maintain accurate records of compliance activities including audits, assessments, training sessions, and incident reports.

• Stay updated on changes in relevant laws affecting network security; recommend policy updates as necessary to maintain compliance.

• Assist in developing metrics to measure the effectiveness of compliance initiatives, and report findings regularly to senior management.

• Foster relationships with internal stakeholders to promote a culture of operational excellence.

• Regularly assess the maturity level of compliance initiatives within industry players; monitor implementation improvements based on findings.

Qualification & Work Experience

• Minimum Bachelor’s Degree in Telecommunication, Information Technology, Computer Science or relevant discipline from a reputable University/College.

• Minimum of 5 - 9 years of working experience in the regulatory and/or information and cyber security domain will be an added advantage.

• Experience in Information Security Audit / Compliance / Technology Evaluation will be an added advantage.

• Problem-solving skills and out-of-the-box thinking.

• Multi-task, work independently, and work under pressure with minimum supervision.

Technical Competencies/Skills

• Network / IT / Information Security

• Project Management

• Network / Information Security Audit/Compliance

• Risk Assessment / Management

• Documentation Maintenance

• Policy Development

• Technology Evaluation

• Strategic communications

• Performance Management

• Legal / Judicial Knowledge

Behavioural Competencies/Skills

• Integrity

• Customer Orientation

• Problem Solving

• Analytical Thinking

• Stakeholder Management

• Teamwork and collaborations

• Attention to details

• Communication and Presentation Skills (BM & English)

• Writing Skills (BM & English)

1) Candidate must be willing to work in Cyberjaya.

2) Malaysian citizen