Senior Manager, Information Security
On-siteKuala Lumpur, Kuala Lumpur, Malaysia
Job Summary
Lead local leadership to drive information security initiatives aligned with Group directives, industry frameworks, and regulatory requirements such as BNM RMiT, NIST, and PCI DSS. Identify, assess, and manage cybersecurity risks while overseeing security monitoring, incident response, and threat management capabilities. Implement tools and master data management platforms to protect information assets from unauthorized access, ensuring timely audit remediation and closure of findings. Review secure application deployments and provide advisory support for transformation initiatives to strengthen the organization's security posture and drive continuous improvement of controls.
Required Qualifications
- Minimum tertiary education
- Minimum 8-10 years of relevant experience in information security or cybersecurity roles
- Proven track record in driving and delivering security initiatives to strengthen the organization's security posture
- Strong understanding of key security frameworks and standards including NIST Cybersecurity Framework, ISO/IEC 27001, CIS Critical Security Controls, as well as applicable local regulatory requirements such as BNM RMiT, BNM MCIPD, and PCI DSS
- Knowledge of threat intelligence and assessment
- Familiarity with security tools and their core functionalities support effective security monitoring and incident response, including SIEM, EDR, DLP and IAM
- Strong understanding and practical application of security controls aligned with the organization's risk appetite, internal policies and standards and regulatory requirements
Desired Qualifications
- Professional certification such as CISM, CISSP
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.