Staff IT Security Engineer: Enterprise & OT Security Lead

Michael Page; Penang; On-site; MYR 194,000 - 238,000; Full time

Benefits offered by this job

Comprehensive benefits

Permanent position

Job summary

Michael Page in Penang seeks a Staff IT Security Engineer to lead architecture and security initiatives across IT and OT. You will analyze threat intelligence, drive vulnerability programs and manage penetration testing.

You will support security monitoring, incident response, and vendor risk assessments while collaborating with GRC and cross-functional teams to strengthen the enterprise security posture.

Qualifications

• Needs 8+ years in cybersecurity, security engineering, security operations or security architecture.
• Experience with SIEM, EDR/XDR, threat detection and monitoring.
• Hands-on in IT and OT security environments.
• Familiar with ISO 27001, ISMS, risk governance, and security policy development.
• Strong communication and teamwork skills.

Responsibilities

• Lead cybersecurity architecture and security improvement initiatives across IT and OT.
• Analyze threat intelligence and attack techniques to identify organizational risks.
• Drive vulnerability and threat management programs with remediation prioritization.
• Manage penetration testing and remediation of findings.
• Oversee security monitoring, incident response, and threat hunting.
• Collaborate with GRC teams on risk governance and security assessments.
• Conduct vendor security risk assessments.
• Support security operations across IT and OT environments.

Skills

Cybersecurity strategy

Threat intelligence

Incident response

Vulnerability management

Security monitoring

Stakeholder management

Project leadership

Education

Degree in Information Technology or Cybersecurity

Tools

SIEM

EDR/XDR

Vulnerability scanners

Firewalls

IT/OT security

Job description

Michael Page in Penang seeks a Staff IT Security Engineer to lead architecture and security initiatives across IT and OT. You will analyze threat intelligence, drive vulnerability programs and manage penetration testing.

You will support security monitoring, incident response, and vendor risk assessments while collaborating with GRC and cross-functional teams to strengthen the enterprise security posture.