Senior IT Security

Raffcomm Sdn Bhd; Kuala Lumpur; On-site; MYR 80,000 - 120,000; Full time

Job summary

A technology solutions provider in Kuala Lumpur is looking for an experienced IT Security Manager to oversee comprehensive security strategies across the IT infrastructure. The ideal candidate will develop security policies, manage incidents, and ensure compliance with regulatory standards. Strong leadership and analytical skills are essential, alongside a commitment to enhancing cybersecurity awareness across the organization.

Qualifications

• Proven experience in IT security management and strategy implementation.
• In-depth knowledge of Bank Negara Malaysia regulations.
• Strong analytical skills to assess security risks.

Responsibilities

• Develop and enforce IT security policies in compliance with regulations.
• Lead monitoring and management of security incidents.
• Coordinate internal and external security audits.

Skills

IT security policy development

Incident management

Vulnerability management

Cybersecurity awareness training

Firewall configuration

Regulatory compliance

Job description

Overview

Oversee and implement comprehensive security strategies across RAFFTECH’s IT infrastructure, encompassing both cloud-based and on-premise environments.

Lead the monitoring and management of security incidents, ensuring timely escalation, response, and mitigation of potential threats or breaches.

Supervise regular security assessments, including vulnerability management and endpoint protection, to safeguard organizational assets.

Responsibilities

• Develop, maintain, and enforce IT security policies and procedures in compliance with Bank Negara Malaysia regulations and other relevant standards.
• Provide strategic guidance to the IT team on the configuration, optimization, and governance of firewalls, antivirus solutions, and other core security systems.
• Coordinate internal and external security audits, ensuring effective tracking and closure of identified vulnerabilities and risks.
• Oversee secure access management for critical systems and applications.
• Ensure comprehensive documentation and audit-ready records of all security incidents, actions, and preventive measures.
• Stay abreast of emerging cybersecurity threats and trends, providing proactive risk assessments and recommendations to the senior leadership team.
• Champion a culture of cybersecurity awareness through ongoing staff training and organizational engagement initiatives.

Compliance and Governance

• Oversee the completion and refinement of the Bank Negara Malaysia (BNM) Exit Plan, ensuring alignment with regulatory expectations and organizational risk management objectives.
• Contribute to the development and enhancement of AML/CFT policies and procedures, ensuring compliance with BNM and relevant regulatory frameworks.