Strategic IT Security & Compliance Lead

Great Eastern; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Great Eastern Malaysia is seeking a Manager of IT Security to safeguard the organization’s IT environment and regulatory compliance. You will lead cross-functional teams, review firewall rules, harden servers, conduct vulnerability assessments, and monitor cloud posture in AWS/Azure.

The role requires 5–7 years in IT security, relevant certifications, and a proactive, risk-aware mindset. You will collaborate with risk, infrastructure, and project teams to protect customers and partners.

Qualifications

• Bachelor degree in information technology or related field.
• Security certifications such as CISSP, CISM, CCSP are advantageous.
• 5–7 years of IT security experience with cloud, network, and regulatory knowledge.

Responsibilities

• Collaborate with cross-border IT security and related IT teams to build secure network architecture.
• Review firewall requests and optimize firewall rules; coordinate regular reviews.
• Lead server hardening reviews for Windows and Linux per security standards.
• Conduct quarterly and ad hoc vulnerability assessments of infrastructure.
• Monitor AWS/Azure environments for misconfigurations and policy violations.
• Represent Infra Security in Change Approval Committee (CAC) for security implications.
• Assess and manage DLP measures for endpoints and network; coordinate with risk teams.
• Assist Third-Party Review Committee in security evaluations and offboarding data deletion.

Skills

Security team collaboration

Firewall rule optimization

Server hardening (Windows/Linux)

Vulnerability assessment

Cloud posture monitoring (AWS/Azure)

Change management review

DLP management

Third-party security assessment

Education

Bachelor Degree in Information Technology

CISSP

CISM

CCSP

Tools

AWS

Azure

Job description

Great Eastern Malaysia is seeking a Manager of IT Security to safeguard the organization’s IT environment and regulatory compliance. You will lead cross-functional teams, review firewall rules, harden servers, conduct vulnerability assessments, and monitor cloud posture in AWS/Azure.

The role requires 5–7 years in IT security, relevant certifications, and a proactive, risk-aware mindset. You will collaborate with risk, infrastructure, and project teams to protect customers and partners.