Senior Manager - IT (Cybersecurity - IT Operation)

Malaysia Airports Berhad; Sepang; On-site; MYR 130,000 - 180,000; Full time

Job summary

A leading airport management company in Malaysia is seeking a Senior Manager for IT Cybersecurity Operations. This pivotal role demands oversight of cybersecurity operations, managing CSOC, and ensuring compliance with critical industry regulations in aviation. Ideally suited candidates will have a degree in computer science and robust experience in both IT and operational technology security frameworks. Proficiency in IAM and incident response complements the ideal skill set. Applications from Malaysian citizens only are welcome, with a deadline of January 28, 2026.

Qualifications

• Minimum 10 years of experience with at least 5 years in cybersecurity governance, compliance, or risk.
• 2+ years in SOC or operational oversight preferably within aviation.

Responsibilities

• Lead and manage cybersecurity operations for proactive threat monitoring.
• Oversee Identity & Access Management and cloud security measures.
• Develop operational cybersecurity metrics, dashboards, and reports.
• Manage outsourced CSOC partners and ensure SLA adherence.

Skills

Security monitoring

Incident handling

SOC architecture

SIEM

SOAR

EDR/XDR

Threat intelligence platforms

IAM concepts

Communication skills

Leadership

Education

Degree in computer science or equivalent

CISM

CISSP

Tools

IAM technologies (e.g., SailPoint, CyberArk, Okta)

Job description

Select how often (in days) to receive an alert:

Senior Manager - IT (Cybersecurity - IT Operation)

Job Description

POSITION GENERAL SUMMARY

• To lead and manage the organization's cybersecurity operations, ensuring proactive monitoring, detection, and response to threats through the CSOC, while overseeing Identity & Access Management and cloud security to safeguard the on-premise and cloud critical systems and data. This role is crucial in maintaining cyber resilience across both IT and OT environments in accordance with industry best practices and aviation regulatory requirements..

ESSENTIAL POSITION FUNCTIONS

Cybersecurity Operations Center (CSOC)

• Lead 24/7 CSOC operations including monitoring, detection, triage, and incident response.
• Develop and enforce standard operating procedures (SOPs), escalation workflows, and incident playbooks.
• Manage performance of outsourced CSOC partners including SLA adherence and threat reporting quality.
• Review threat intelligence feeds and use cases to improve visibility and threat detection capability.
• Ensure timely investigation and resolution of cybersecurity incidents with proper root cause analysis and reporting.
• Plan and conduct periodic cyber drills to validate operational readiness and response.

Identity & Access Management (IAM)

• Oversee the design, implementation, and enforcement of IAM policies and governance.
• Ensure role-based access control (RBAC), privileged access management (PAM), and user lifecycle management are in place and effective.
• Collaborate with IT and business units to regularly review and certify access rights.
• Drive automation and continuous improvement of IAM tools and processes to enhance security and user experience.
• Monitor IAM-related risks and ensure compliance with internal controls, regulatory requirements, and cybersecurity standards.

Cloud Security Management

• Oversee secure cloud architecture designs for IaaS, PaaS, and SaaS deployments
• Ensure alignment of cloud security initiatives with overall cybersecurity and business goals.
• Maintain compliance with industry standards and regulations (e.g., ISO 27001, NIST, GDPR, PCI-DSS).

Operational Security Governance

• Develop and maintain operational cybersecurity metrics, dashboards, and compliance reports.
• Ensure cybersecurity controls are consistently applied across IT and OT systems.
• Support audits and ensure the closure of all operational findings from internal and external reviews.
• Continuously improve security operations by assessing new technologies, tools, and processes.
• Manage a team of cybersecurity professionals and vendors responsible for CSOC and IAM.
• Provide mentorship, training, and performance evaluations to ensure skill growth and operational excellence.
• Coordinate with vendors and service providers to optimize security technologies and support models.
• To ensure understanding and involvement from all level of management and employees
• To get top management commitment in compliance activities
• To get all staff and management to adhere to policies, procedures and internal control

Skills

• Deep understanding of security monitoring, incident handling, and SOC architecture
• Ability to manage external SOC vendors, ensure SLA adherence, and translate technical insights into governance action.
• Hands-on experience with SIEM, SOAR, EDR/XDR, and threat intelligence platforms
• Strong knowledge of IAM concepts, tools, and governance frameworks
• Experience managing outsourced security operations and contract SLAs
• Excellent problem-solving, communication, and crisis management skills
• Strong leadership and stakeholder engagement across technical and non-technical teams
• In-depth knowledge of both Information Technology (IT) and Operational Technology (OT) cybersecurity risks, with practical experience addressing threats in airport or aviation operations.
• Strong leadership, analytical, and problem-solving skills.
• In-depth understanding of cybersecurity frameworks, threat landscapes, and compliance environments.
• Excellent communication skills for engaging with regulators, internal stakeholders, and executive management.

Education

External

• Degree preferably with specialization in computer science related discipline and equivalent work experience required. Industry certification such as CISM, CISSP, GCIH and or any other industry certification preferred.
• CISSP, CISM, GIAC, GCIA, GCIH, or equivalent
• Certifications in IAM technologies (e.g., SailPoint, CyberArk, Okta) are a plus
• ITIL or equivalent operational process framework certifications

Relevant Industries

External

• Minimum 10 years of experience, with at least 5 years in cybersecurity governance, compliance, or risk, and 2+ years in SOC or operational oversight deally within the aviation or critical infrastructure sector.

Additional Information

Open for Malaysian citizens only.

Please be reminded that only online applications will be entertained.

Applications should reach us by 28 January 2026.

Only the shortlisted candidate will be notified.

Job Segment: Compliance, Computer Science, User Experience, Cyber Security, Legal, Technology, Security, Aviation