Total 9 Computer Security job vacancies in Kuala Lumpur

Job Description

Security Engineer's role is to support the product team in performing product/solution installation, testing, documentation, and support.

Responsibility:

• Provide technical consulting, implementation, support and service delivery to our customers on Identity Access Management (IAM) and Single Sign-On (SSO) solutions.
• Perform system installation, implementation & upgrade services of IAM/SSO solutions.
• Involve in full cycle of project implementation activities - business requirement information gathering, prepare & finalize solution design, solution implementation & development, SIT/UAT, prepare system documentation & production cutover and system go live.
• Involve in post-implementation production support/ad hoc to ensure all the problems/issue solved within the target SLA.
• Monitor and analyze project risk and provide status update report to customer.
• Support pre-sales consulting activities; eg: product presentation, demo and POC.
• Conduct technical training to customers on IAM/SSO solution. 
   

Required Skills

• Candidate must possess at least a Diploma, Advanced/Higher/Graduate Diploma, Bachelor's Degree, Post Graduate Diploma or Professional Degree in Engineering (Electrical/Electronic), Computer Science/Information Technology, Science & Technology or equivalent.
• 1 to 3 years of experience in managing the development, implementation, practice and maintenance of IAM/SSO solutions.
• Hands-on experience with knowledge IAM/SSO solutions tools and platforms.
• Excellent written and communication skills.
• Excellent analytical and problem-solving skills.

Additional Notes

• Understanding of IT infrastructure components, including servers, networks, databases, and other relevant technologies.
• Knowledge of scripting languages (e.g., Bash, PowerShell, Python) and automation tools.

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Central location
• Flexible working hours
• Casual dress code
• Medical insurance
• Personal leave
• Open culture
• Personal development opportunities

職位描述

安全工程師的職責是支援產品團隊執行產品/解決方案安裝、測試、文件記錄和支援。

責任：

• 為我們的客戶提供身分存取管理 (IAM) 和單一登入 (SSO) 解決方案的技術諮詢、實施、支援和服務交付。
• 執行IAM/SSO解決方案的系統安裝、實施和升級服務。
• 參與專案實施活動的整個週期 - 業務需求資訊收集、準備和最終確定解決方案設計、解決方案實施和開發、SIT/UAT、準備系統文件和生產切換以及系統上線。
• 參與實施後生產支援/臨時支持，以確保所有問題/問題在目標 SLA 內得到解決。
• 監控和分析專案風險並向客戶提供狀態更新報告。
• 支持售前諮詢活動；例如：產品演示、演示和 POC。
• 為客戶提供有關 IAM/SSO 解決方案的技術培訓。
  

所需技能

• 候選人必須至少擁有工程（電氣/電子）、電腦科學/資訊技術、科學與技術或同等學歷的文憑、高級/高級/研究生文憑、學士學位、研究生文憑或專業學位。
• 擁有 1 至 3 年管理 IAM/SSO 解決方案的開發、實施、實踐和維護的經驗。
• 擁有 IAM/SSO 解決方案工具和平台知識的實務經驗。
• 優秀的書面和溝通能力。
• 出色的分析和解決問題的能力。

補充筆記

• 了解 IT 基礎架構元件，包括伺服器、網路、資料庫和其他相關技術。
• 了解腳本語言（例如 Bash、PowerShell、Python）和自動化工具。

津貼和福利

• 津貼（旅費、交通費等）
• 中心位置
• 彈性的工作時間
• 休閒著裝要求
• 醫療保險
• 事假
• 開放文化
• 個人發展機會

責任

✍ 負責與網路安全要求和新興相關ICT技術相關的端到端整體解決方案和服務活動，以實現最佳水準的網路安全機密性、完整性和可用性標準。
✍ 負責網路安全指南、基準、標準和流程的持續維護、監控和更新。這包括預測成長以確保可擴展性，評估基準、觀察或其他行業最佳實踐帶來的增強價值，並在需要時納入變更。
✍ 負責建立和維護業務工作流程和技術的現況和未來安全流程和工作指導。
✍ 開發並推薦知識開發以及文件化實務和工程知識抵押品的創建。
✍ 技術專家提供全面的解決方案和工程，以建構技術解決方案的技術要求。
✍ 提供IT 解決方案工程和設計建議的IT 安全諮詢和審查服務，以確保解決方案符合IT 安全要求，從而保護客戶的IT 基礎設施和系統。
✍ 提供適用於各種開發技術的技術專業知識和諮詢。
✍ 負責為客戶的整個網路和系統基礎設施分析、評估和推薦最佳的資訊安全技術和解決方案。
✍ 負責從安全角度和角度進行符合客戶安全控制和基線的解決方案評估、POC、UAT。
✍ 就資訊安全問題提供建議和諮詢，並為各個內部團隊和部門提供建議。
✍ 對新出現的內部和外部威脅、技術趨勢和減輕 IT 安全風險的方向進行研究和環境掃描，並透過跨 IT 部門和職能部門的協作進行評估，以改善 IT 安全基礎設施和服務。
✍ 規劃、研究、分析、評估和推薦資訊安全技術解決方案、方向和採用。
✍ 研究和開發新的資訊安全技術以改善和創造商業機會。
✍ 與外部 IT 安全專家和其他 IT 組織建立和維護策略關係/網路和協作，以衡量和改善客戶向利害關係人提供的網路安全基礎設施服務。

要求

✍ 電腦科學、資訊系統、工程學、軟體工程或任何相關學科的學士學位。
✍ 在技術相關領域擁有約 8-10 年的經驗，並具有相關 IT 安全領域和工程的具體專業知識。
✍ 具有撰寫和支援策略性商業策略的經驗，並具有以業務為中心的心態。
✍ 清楚地了解如何根據特定的架構原則將安全架構和設計轉化為詳細的技術組件。
✍ 此角色需要掌握安全工程生命週期並了解企業安全架構環境。
✍ 網路安全治理、指南和風險以及網路安全解決方案領域的基礎知識。
✍ IT 網路的基礎知識以及對 OT 和物聯網架構和工程的更好理解。
✍ 具有強化練習和技術合規性保證練習的經驗。

工作亮點

✅ 僅限馬來西亞本地人。
✅ 每週工作 5 天，採用混合工作安排。
✅ 極佳的成長和職涯發展機會。
✅ 有競爭力的薪資待遇。
✅ 偉大的跨國公司（能源部門）工作文化。

Role & Responsibilities:

• Implement information / IT security engagements for clients
• Provide delivery expertise on information security projects. This could be on technical or process aspects (such as Information Security Management Systems (ISMS) or ISO 27001, Business Continuity Management / IT Disaster Recovery Management or ISO 22301/ ISO 27301, Data Loss Prevention (DLP), Identity and Access Management (IAM), cloud security, cyber security design, tools and solutions, security strategy and security project management).
• Experience in the identification, assessment, mitigation and management of information security risks and issues across the information security spectrum.
• Identify best practices for Information Security into technically feasible and user friendly deliverables and communicate to clients and their Information Security staff.
• Gain understanding of key customer issues and help create proposals as required.
• Build own knowledge and competency in cyber security and gain alignment and understanding of at least one industry.

Qualifications:

• Degree in any discipline and/or MBA from a recognised institution; IT Degree preferred.
• Related certifications are a plus e.g. CISSP, CCSP, SSCP, GSLC, GISP, CISM, CRISC, CGEIT, CISA, CCSK, CEH, CCNA, ISO 27001 Lead Auditor, etc.
• Good overall understanding of IT.
• Strong understanding of information security & regulatory standards/ frameworks; e.g. ISO/IEC 27001, COBIT, ITIL, PCI-DSS, NIST Cyber Security Framework, GPIS1, etc.
• Good technical knowledge on at least one of the following areas:

-          Data Security, Privacy, Classification and Data Loss Protection.

-          IT Disaster Recovery Planning and Business Continuity Management.

-          Network security architecture, management and controls including firewall, routers, IPS etc.

-          Threat Intelligence & Advanced Persistent Threats (APT).

-          Security Strategy and Roadmaps.

-          Security Policy, Standard and Framework.

-          Information Security Management Systems.

-          Log Management and SIEM.

-          Identity and access management solutions and implementation.

- Cloud security.

• Familiarity and experience in security standards and regulatory frameworks (e.g. ISO/IEC 27001, ITIL, GPIS1, PCI-DSS, etc.)

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Nearby public transport
• Central location
• Flexible working hours
• Personal leave
• Open culture
• Personal development opportunities

Role & Responsibilities:

• Work with technical project team to implement technical solution aligning to client’s requirement, project scope and timeline.
• Provide deployment, documentation, support of project-wide information security solution, practices and policies.
• Serve as first point of contact for security solutions’ technical support.
• Act as technical subject matter to perform technical issue troubleshooting, root-cause analysis, issue resolution or escalation.
• Contribute to building the organization security solutions technical knowledge and cybersecurity knowledge.
• Traveling to customer site to implement solution or troubleshooting system issue when required.

Qualifications:

• Possess a degree or higher degree in IT, Information Security or related field
• Good understanding of cybersecurity framework or regulatory requirement such as NIST CSF, ISO27001, Mitre ATT&CK framework and etc.
• Strong communication skills verbal and written in English and Bahasa Malaysia.
• Continuous learning attitude to develop skills in cyber security and appetite to learn new technologies/security solutions.
• Highly organized, self-motivated, have good time management and able to work under minimum supervision.

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Nearby public transport
• Central location
• Flexible working hours
• Open culture
• Personal development opportunities

角色和職責：

• 與技術專案團隊合作，實施符合客戶要求、專案範圍和時間表的技術解決方案。
• 提供專案範圍的資訊安全解決方案、實務和策略的部署、文件和支援。
• 作為安全解決方案技術支援的第一個聯絡人。
• 充當技術主題來執行技術問題故障排除、根本原因分析、問題解決或升級。
• 有助於建構組織安全解決方案技術知識和網路安全知識。
• 需要時前往客戶現場實施解決方案或排除系統問題。

資格：

• 擁有IT、資訊安全或相關領域的學位或更高學位
• 熟悉網路安全框架或監管要求，例如 NIST CSF、ISO27001、Mitre ATT&CK 框架等。
• 具有良好的英語和馬來語口頭和書面溝通能力。
• 持續學習的態度，培養網路安全技能和學習新技術/安全解決方案的興趣。
• 組織能力強，自我激勵，有良好的時間管理能力，能夠在最少的監督下工作。

津貼和福利

• 津貼（旅費、交通費等）
• 附近的公共交通
• 中心位置
• 彈性的工作時間
• 開放文化
• 個人發展機會

角色和職責：

• 為客戶實施資訊/IT 安全承諾
• 提供資訊安全專案的交付專業知識。這可能涉及技術或流程方面（例如資訊安全管理系統 (ISMS) 或 ISO 27001、業務連續性管理/IT 災難復原管理或 ISO 22301/ISO 27301、資料遺失防護 (DLP)、身分和存取管理 (IAM) ）、雲端安全、網路安全設計、工具和解決方案、安全策略和安全專案管理）。
• 在識別、評估、緩解和管理整個資訊安全領域的資訊安全風險和問題方面擁有豐富的經驗。
• 將資訊安全的最佳實踐確定為技術上可行且用戶友好的可交付成果，並與客戶及其資訊安全人員進行溝通。
• 了解關鍵客戶問題並協助根據需求制定提案。
• 建立自己的網路安全知識和能力，並獲得對至少一個行業的協調和理解。

資格：

• 任何學科的學位和/或來自認可機構的 MBA 學位； IT學位優先。
• 相關認證優先，例如 CISSP、CCSP、SSCP、GSLC、GISP、CISM、CRISC、CGEIT、CISA、CCSK、CEH、CCNA、ISO 27001 首席審核員等。
• 對 IT 有良好的整體了解。
• 對資訊安全和監管標準/框架有深入的了解；例如 ISO/IEC 27001、COBIT、ITIL、PCI-DSS、NIST 網路安全框架、GPIS1 等。
• 至少在以下領域之一具有良好的技術知識：

- 資料安全、隱私、分類和資料遺失保護。

- IT 災難復原規劃和業務連續性管理。

- 網路安全架構、管理和控制，包括防火牆、路由器、IPS等。

- 威脅情報和進階持續性威脅 (APT)。

- 安全戰略和路線圖。

- 安全政策、標準和框架。

- 資訊安全管理系統。

- 日誌管理和 SIEM。

- 身分和存取管理解決方案和實施。

- 雲端安全。

• 熟悉安全標準和監管框架並擁有相關經驗（例如 ISO/IEC 27001、ITIL、GPIS1、PCI-DSS 等）

津貼和福利

• 津貼（旅費、交通費等）
• 附近的公共交通
• 中心位置
• 彈性的工作時間
• 事假
• 開放文化
• 個人發展機會

Control Risks is currently looking to hire a Country Security Lead to support a global banking client and assume responsibility for the physical security of the client's offices and other commercial premises within Malaysia.

Please note that this role is scheduled to commence employment on 1st July 2024.

Responsibilities:

• Leads and mentors a team of direct employees and vendors responsible for the physical security of branches, offices, and other facilities within the country.
• On a routine basis, monitors security personnel and security system performance to ensure all security, safety and compliance requirements are met, including service delivery of all security related vendors.
• Devises local procedures for access control, CCTV surveillance and alarm monitoring in alignment with global and local standards.
• Ensures in-country security system maintenance, minor project works and software/hardware upgrades are executed in alignment with bank stakeholder requirements, global and local standards.
• Manages security and safety incidents, follow-up investigation and reporting to all stakeholders.
• Conducts local risk assessments, makes recommendations on physical security measures and implements them in accordance with global and local standards.
• Ensures security training, certification, tests & drills are periodically conducted and records maintained.
• Keeps senior level management informed on key issues, risks and incidents.
• As the Country level leader of physical security you are the key point of contact for operational security matters and will engage all stakeholders through excellent communication and account management skills.

• High School Diploma or above.
• 4-6 years prior commercial security and/or law enforcement related experience.
• Proven managerial and leadership ability.
• Prior experience as shift leader, supervisor and security manager preferred.
• Able to comprehend and interpret most business documents.
• Able to respond effectively to the most sensitive issues.
• Able to write reports and manuals.
• Able to make effective and persuasive presentations on security training, concepts, and procedures to both staff, public groups and senior management stakeholders.
• Able to forecast and prepare annual budgets. Conducts basic financial analysis including the preparation of reports.
• Working knowledge of Microsoft Word/Excel.
• Excellent understanding of the operation of Access Control, CCTV & Burglar Alarm systems.
• Basic knowledge of IP networks.
• Good written and oral English language capability.

Responsible for supporting and improving the IT Security Posture of related hardware, software, and configuration to ensure it meets the company security policy and minimum security baseline.

Responsibilities: 

• Secure the information system by identifying and solving potential security issues and recognizes potential abnormalities and reports violations.

• Maintain a proactive approach to protecting the system by defining access privileges, control structures, and resources.

• Maintain the infrastructure health by performing daily monitoring, patch updates, and configuration review. Implements security improvements by assessing the current situation, evaluating trends, and anticipating requirements.

• Liaise with vendors to ensure projects, services and tasks are implemented as per specification and timely manner.

• Prepare technical documentation, system manuals, workflow processes, procedures, and guidelines and update them according to SOP.

• Ensure the completion of new equipment setup or configuration changes according to the maintenance schedule or recommended changes.

• Determines security violations and inefficiencies by conducting periodic audits. Upgrades system by implementing and maintaining security controls.

• Assist in every related area of IT Infrastructure whenever required to ensure the continuous smooth running of the MIS department.

• To provide after-hours support according to work requirements and job schedule.

• To perform any other tasks or assignments as directed by the management from time to time.