Senior IT Security Manager: Cloud & Risk Defense

Great Eastern; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Great Eastern is seeking an experienced Manager of IT Security to safeguard the organization’s IT environment and ensure regulatory compliance. The role focuses on protecting digital assets, maintaining trust with customers and partners, and enabling uninterrupted operations in a deeply digital landscape.

You will lead cross-functional security efforts, review firewall rules, perform server hardening, conduct vulnerability assessments, monitor cloud environments, and participate in change

Qualifications

• Bachelor Degree in Information Technology or related field.
• Security certifications such as CISSP, CISM, CCSP are an advantage.
• 5-7 years of experience in IT security.

Responsibilities

• Collaborate with cross-border IT security and related IT teams to create a robust and secure network architecture.
• Review firewall requests and optimize firewall rules, coordinating regular reviews to remove outdated or risky rules.
• Perform server hardening reviews for Windows and Linux in line with security standards.
• Conduct quarterly and ad hoc vulnerability assessments to identify and mitigate risks.
• Monitor AWS/Azure environments for misconfigurations and policy violations.
• Represent Infra Security in Change Approval Committee and review security implications of change requests.
• Manage DLP measures for endpoints and network and coordinate with Technology Risk Management.
• Assist in third-party security assessments and ensure proper data deletion during offboarding.

Job description

Great Eastern is seeking an experienced Manager of IT Security to safeguard the organization’s IT environment and ensure regulatory compliance. The role focuses on protecting digital assets, maintaining trust with customers and partners, and enabling uninterrupted operations in a deeply digital landscape.

You will lead cross-functional security efforts, review firewall rules, perform server hardening, conduct vulnerability assessments, monitor cloud environments, and participate in change