Senior IT Security Project Lead

U Mobile; Kuala Lumpur; On-site; MYR 150,000 - 230,000; Full time

Benefits offered by this job

Flexi working hours arrangements

Staff Line & Device Subsidy

Job summary

U Mobile is seeking a Senior Specialist, Information Security to provide cybersecurity advisory, governance, risk assessment and project coordination across the organization. You will work with business and technology teams to embed security controls throughout project implementation and support regulatory requirements.

The role demands 7–10 years in cybersecurity, plus at least 3 years in security review or advisory, with strong ability to translate standards into practical guidance for

Qualifications

• Bachelor’s degree in Information Security or related field.
• 7–10 years in cybersecurity with at least 3 years in security review or advisory.
• Experience coordinating cybersecurity initiatives, audits, regulatory reviews.
• Ability to translate security standards/regulations into practical implementation guidance.
• Strong communication to technical and non-technical stakeholders.

Responsibilities

• Provide cybersecurity advisory for new systems, cloud, AI, and digital initiatives.
• Review high-/low-level designs, data flows, and vendor proposals for security.
• Lead or coordinate cybersecurity projects and track milestones.
• Prepare management dashboards, risk reports and audit evidence.
• Engage with vendors to assess security requirements and controls.

Skills

Security architecture

Security advisory

Risk assessment

Regulatory compliance

Project management

Vendor management

Stakeholder communication

Education

Bachelor's Degree in Information Security / IT

Tools

Security assessment tools

Threat modeling software

Job description

U Mobile is seeking a Senior Specialist, Information Security to provide cybersecurity advisory, governance, risk assessment and project coordination across the organization. You will work with business and technology teams to embed security controls throughout project implementation and support regulatory requirements.

The role demands 7–10 years in cybersecurity, plus at least 3 years in security review or advisory, with strong ability to translate standards into practical guidance for