Senior Security Engineer — ISO27001 & Incident Response

Mesiniaga Berhad; Subang Jaya; On-site; MYR 120,000 - 200,000; Full time

Job summary

Mesiniaga Berhad in Malaysia is seeking a senior cybersecurity professional to manage daily security operations, incidents, and ISO 27001 ISMS maintenance. You will assess risks, strengthen controls, and collaborate with IT, auditors, and partners.

The role requires at least 5 years of cybersecurity experience and hands-on expertise with Entra ID, endpoint security, SIEM, EDR, and security operations, along with relevant certifications and strong English/Bahasa communication skills.

Qualifications

• At least 5 years of cybersecurity experience.
• Hands-on experience with Entra ID, endpoint security, SIEM, EDR and security operations.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or Security+ are a plus.
• Excellent communication and presentation skills.
• Proficient in English and Bahasa (both written and verbal).

Responsibilities

• Manage cybersecurity every day across company systems.
• Handle security incidents—investigate, contain, fix, and prevent recurrence.
• Find and fix security weaknesses across systems and applications.
• Manage security policies and compliance, ISMS ISO 27001.
• Work with ISO 27001: prepare for audits, maintain documentation, and ensure controls are effective.
• Assess security risks and recommend mitigations.
• Collaborate with IT, management, auditors, and external security vendors.
• Improve security systems and processes.
• Educate employees through cybersecurity awareness training.
• Guide junior security staff in developing skills.

Skills

Entra ID

Endpoint security

SIEM

EDR

Security operations

ISO 27001

CISSP

CISM

ISO 27001 Lead Implementer/Auditor

Security+

English

Bahasa

Job description

Mesiniaga Berhad in Malaysia is seeking a senior cybersecurity professional to manage daily security operations, incidents, and ISO 27001 ISMS maintenance. You will assess risks, strengthen controls, and collaborate with IT, auditors, and partners.

The role requires at least 5 years of cybersecurity experience and hands-on expertise with Entra ID, endpoint security, SIEM, EDR, and security operations, along with relevant certifications and strong English/Bahasa communication skills.