Total 170 Manager information security analyst job vacancies in Malaysia

Job Description:-

- To conduct vulnerability assessment/penetration testing in its skillset and experience to gain access and exploit vulnerabilities in the company’s infrastructure.
- To maintain the Security Operations Manual up to date for use by all IT security personnel to cover duties.
- To conduct computer forensic analysis and understand the impact on the business.
- To research tools, techniques, countermeasures and trends in network vulnerabilities, data hiding, and network security.
- Continuous development of threat hunting and proactively identifying security incidents before they occur.
- To design and support the overall cybersecurity architecture of the enterprise systems environment.
- Applying social engineering and phishing techniques to manipulate employees into exposing or revealing information to compromise their machines.
- Maintaining standard information security policy, procedure, and documentations.
- Monitor identity and access management, including monitoring for abuse of permissions by authorised system users.
- Involve in IT Security project management and assist in identifying and evaluating vendor IT security solutions.
- To ensure compliance with the provisions of the IT Security Policies and regulatory guidelines.
 

Job Requirements:-

- Professional Certificate/Diploma/Degree in Computer Science/Information Technology or equivalent.
- 8 to 10 years related experience in IT Security and with proven minimum 4 years working experience in managing IT security projects.
- Industry recognized security certifications, such as CISSP, CEH etc. preferred.
- Knowledge in IT Security methodology, Bank Negara Guidelines, PCI DSS, Risk - Management and IT auditing will be an added advantage.
- Technical knowledge of database and operating system security.
- Knowledge of network protocol (WAN,LAN) and security concerns within TCP/IP environment.
- Thorough understanding of the latest security principles, techniques and protocols.
- Familiar with web related technologies.
- Ability to present ideas in business-friendly language.
- Ability to prioritize, track and manage tasks and action items.
- Excellent communication, writing, analytical thinking, strong team player and an individual contributor too.

Perks & Benefits

• Annual leave
• Medical
• Nearby public transport

職位描述：-

- 根據其技能和經驗進行漏洞評估/滲透測試，以存取和利用公司基礎設施中的漏洞。
- 保持安全操作手冊處於最新狀態，以供所有 IT 安全人員履行職責時使用。
- 進行電腦取證分析並了解對業務的影響。
- 研究網路漏洞、資料隱藏和網路安全的工具、技術、對策和趨勢。
- 持續發展威脅追蹤並在安全事件發生前主動辨識。
- 設計和支援企業系統環境的整體網路安全架構。
- 應用社會工程和網路釣魚技術來操縱員工暴露或洩漏資訊以危害他們的機器。
- 維護標準資訊安全政策、程序和文件。
- 監控身分和存取管理，包括監控授權系統使用者濫用權限的情況。
- 參與 IT 安全專案管理並協助識別和評估供應商 IT 安全解決方案。
- 確保遵守 IT 安全政策和監管指南的規定。

工作要求：-

- 電腦科學/資訊科技專業證書/文憑/學位或同等學歷。
- 擁有 8 至 10 年 IT 安全相關經驗，並擁有至少 4 年管理 IT 安全專案的工作經驗。
- 有業界認可的安全認證，如CISSP、CEH等優先。
- 了解 IT 安全方法、國家銀行指南、PCI DSS、風險管理和 IT 審計將是一個額外優勢。
- 資料庫和作業系統安全的技術知識。
- 了解 TCP/IP 環境中的網路協定（WAN、LAN）和安全性問題。
- 透徹理解最新的安全原理、技術和協議。
- 熟悉Web相關技術。
- 能夠用商業友善的語言表達想法。
- 能夠確定優先順序、追蹤和管理任務和行動項目。
- 優秀的溝通、寫作、分析思維、強大的團隊合作精神和個人貢獻者。

津貼和福利

• 年假
• 醫療的
• 附近的公共交通

Responsibilities:

• To ensure the entire safety SIC including employees are in compliance with company guidelines and the safety guidelines of DOSH.
• To lead, conduct and improve safety audits.
• To develop and implement workplace safety policies and procedures in accordance with OSHA standards.
• Reviews, revises, maintains, and implements the organizations fire prevention, safety, and security policies and procedure.
• Analyse existing policies and procedures to find weaknesses.
• Evaluate the gravity of each risk by considering its consequences.
• Create and implement security policies, protocols and procedures.
• Maintain budgets for security operations and monitor expenses.
• To conduct physical risk assessments for roles that require the usage of PPE or relevant equipment.
• Review, revise and implement environmental policies.
• Ensure SIC is aligned and compliant with local environment laws and legislations.
• To assess, analyze and collate environmental performance data and reporting it to stakeholders, clients and regulatory bodies.
• Analyse data to form proposals for improvements.

Requirements:

• Bachelor Degree in related field with additional professional qualifications in HSE and Fire & Safety Management Systems.
• A valid Green Card holder.
• 20 years working experience in SSHE.
• Experience in dealing with local authorities that are related.
• Good project management skills.
• Strong knowledge of environmental and health and safety basic regulatory and legal framework.
• Excellent communication and leadership skills.
• Good organization and time management.
• Strong environmental awareness

Perks & Benefits

• Employee equity
• Allowance (travel stipends, transportation, etc.)
• Casual dress code
• Medical insurance
• Personal leave
• Personal development opportunities

Summary

Working as part of the information security office within the IT department at Pacific Prime CXA, the GRC (Governance, Risk and Compliance) Manager will be responsible for leading the day-to-day IT compliance, data governance and IT risk management functions. Primary responsibility will include defining, creation, management and maintenance of IT and organizational policies and standards in support of legal and regulatory compliance needs as well as general IT and organizational information security controls and practices.

Responsibilities

• Establishing corporate information security policies, standards, guidelines, baselines and practices that protect the integrity and confidentiality of information and network infrastructure.
• Develop procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.
• Proactively identify audit and compliance related issues to reduce the risk of security exposures, gaps in the design and operating effectiveness of controls whilst seeking opportunities for continuous improvement.
• Driving IT security programs in line with internal and external standards and ensuring compliance with in-country regulatory requirements.
• Maintaining oversight to enterprise-wide security technologies, actively monitoring & responding to security events.
• Develop and maintain standards and controls to ensure the protection of data based on classification.
• Work directly with business units to identify critical data and ensure appropriate data classification and protection standards are implemented.
• Manage the attestation program for all IT controls to support assurance and alignment across all information security stakeholders.
• Support internal and external audit process for relevant compliance concerns including PDPA, GDPR, MAS TRM, ISO27001, etc.
• Perform and evaluate information security risk assessments for various information systems and processes, including annual penetration tests.
• Develop, monitor, track and report against IT Security metrics and KPIs that help the IT Infra understand threats, vulnerabilities and risks associated with protecting information across the enterprise and plans to mitigate those risks.
• Develop and maintain the IT Risk Register to support ongoing tracking and management of all identified risks and issues and to ensure adequate and timely resolutions to all audit/review issues relating to security.
• Lead the development and operation of third-party vendor risk assessment, management and due-diligence program.
• Conduct client meeting and drive all the questions arising from client relationship teams. This includes completing client’s info security questionnaires and liaising with clients on all such requirements within tight deadlines.
• Formulate, lead and communicate security goals and objectives based on an integrated understanding of business priorities, security vision and strategy.
• Providing security related support to IT and business team users and facilitate recommendations on future technical trends/directions that encompass multiple systems and teams to meet business critical initiatives.
• Point of contact to assist and advise on Information Security related matters

Requirement

• BSc in Computer Science or equivalent; with 5+ years of relevant working experience in IT governance, risk, and compliance management.
• ISACA / CISM / CISSP Certification.
• Strong understanding of fundamental information security concepts and technology.
• Familiarity with ISMS and security frameworks, particularly NIST Cybersecurity Framework.
• Understanding of Information Security principles, IT infrastructure (including operating systems, applications, communications and network protocols), architecture elements of Identity Access Management (IAM), network security, data security/DLP, cryptography, logging and monitoring.
• Experience in security design, threat modelling and risk assessments.
• Candidate should be fully aware of the current and emerging security solutions available in the industry.
• Ability to be self-motivated, flexible and be able to drive and manage multiple tasks and priorities on very tight deadlines in a fast paced and rapidly changing environment.
• Strong interpersonal and collaboration skills with the ability to develop, maintain and foster constructive relationships with others.
• Excellent written and oral communication skills.
• Effective communication and analytical skills
• Strong work ethic with attention to detail.

SAM is looking to fill the position of Information Security Manager. This is a regional role and is overall in-charge of all the entities under SAM. He/She will report to the CEO.

Responsibilites

• To develop and implement a long-term Information Security & Cyber Security strategies and roadmap to protect corporate information and IT assets.
• Set up Cyber Security policy to standardize practice and govern all the security landscape within the group of companies.
• Provide Information security & Cyber Security strategic advice to senior management.
• Modernize and optimize the conduct of governance and oversight roles to maintain risk register, third-party vendor assessment, leveraging and advanced analytics for trending and compliance monitoring.
• Manage Information & Cyber Security and Personal Data Protection matters, liaise with different stakeholders and oversee the implementation of it to improve the overall Information Security, Cyber Security and Personal Data Protection.
• Drive the review and enhancement of third-party vendor risk management and establish a holistic framework and structure to manage the risk.
• Ensure the Information & Cyber Security practices are in compliance with applicable laws, regulations and policies.
• Conduct regular communication and refresher briefing to senior management to maintain a good level of Information & Cyber Security and information risk awareness.

Requirements

• Degree in IT/Computer Studies or Diplomas with extensive relevant cybersecurity experience
• At least 5-7 years of relevant working experience in the field of Information Security and Cybersecurity
• Possess at least one of professional cyber security certifications such as CISA, CISSP and CISM. Those with CEH, CRISC will have added advanatages.
• Good communication, interpersonal skills, with proven abilities to manage multiple priorities, drive project teams and collaborate across business units and partners to achieve desired goals.
• Possess Information & Cyber Security domain knowledge across areas such as IT architecture and solutions, security operation center, application security, infrastructure & network security, data & information protection, supply chain security, cloud security, Information & Cyber Security regulations and compliance will have added advantage.
• Strong experience and knowledge in technology and Information & Cyber Security standards and policy review, oversight and governance, risk management and audit.
• In-depth knowledge of industry information and cyber security practices, frameworks and standards such as the NIST Cybersecurity Framework and ISO 27001.
• Hands-on working knowledge in managing and delivering security penetration testing, vulnerability management services and application security.

About the company Davidson Technology are currently partnering with Fraser Coast Regional Council to secure their new Manager, Information Technology who will lead their IT function through their next level of maturity. The Fraser Coast, one of Queensland's oldest and fastest-growing regions, thrives on manufacturing, agriculture, and a burgeoning tourism and health sector. Situated near South-East Queensland, it offers proximity to major cities while maintaining a serene environment. The Council's overarching goal is 'Building better communities together,' fostering collaboration across all roles to enhance residents' quality of life. About the Role The Manager, Information Technology at Fraser Coast Regional Council plays a pivotal role in overseeing the direction and operational management of the IT function. This involves developing and managing operational plans to meet business unit goals, collaborating with stakeholders to ensure IT's role in supporting operational outcomes, and establishing and maintaining ... Click here to view more detail / apply for Manager, Information Technology

About the company Davidson Technology are currently partnering with Fraser Coast Regional Council to secure their new Manager, Information Technology who will lead their IT function through their next level of maturity. The Fraser Coast, one of Queensland's oldest and fastest-growing regions, thrives on manufacturing, agriculture, and a burgeoning tourism and health sector. Situated near South-East Queensland, it offers proximity to major cities while maintaining a serene environment. The Council's overarching goal is 'Building better communities together,' fostering collaboration across all roles to enhance residents' quality of life. About the Role The Manager, Information Technology at Fraser Coast Regional Council plays a pivotal role in overseeing the direction and operational management of the IT function. This involves developing and managing operational plans to meet business unit goals, collaborating with stakeholders to ensure IT's role in supporting operational outcomes, and establishing and maintaining ... Click here to view more detail / apply for Manager, Information Technology

About Us
With over 85 years of tangible impact, we have carved out our place as a leader in water infrastructure across Australia and New Zealand. Embrace the opportunity to be part of our dynamic team creating the future of water future for generations to come. Your expertise and dedication will play a pivotal role in our continued success and be a driving force in our journey towards a water-resilient world.
The Opportunity
We currently have a new opportunity for a seasoned Group Information Technology Manager who will provide the vision and leadership for designing, developing and implementing IT initiatives. With your expertise, you will develop and implement a comprehensive technology strategy aligned to the technology and organisational objectives.
Your strength lies in:

Developing and implementing an IT strategy in line with budget
Overseeing the design, implementation, and maintenance of technology infrastructure

... Click here to view more detail / apply for Group Information Technology Manager

Management of information governance Data security breach management including investigation and mitigation Information sharing Data Protection Impact Assessments Asset register management including asset owner and administrator training Information governance training delivery including mandatory data security training

Job Summary

Implement and oversee Sparrow's IT security operations framework, including security operations role definitions, monitoring, incident and event management, privileged access management, and overall security architecture. Ensure compliance with industry standards and regulatory requirements.

Job Responsibilities

· Define and implement IT security operations framework for the company, including security operations role definitions, monitoring, incident and event management, privileged access management, and overall security architecture

· Collaborate with IT management to implement appropriate segregation of duties in compliance with industry best practices

· Create and promote a strong security culture throughout the organization

· Define, implement, document, and conduct reviews on Sparrow's Information Security Policies and Procedures, Information Security Risk Management, and Change Management

· Ensure compliance with information security policies and procedures among employees, contractors, partners, and other third parties

· Work with business units, vendors, IT application, and infrastructure teams during the software development lifecycle to ensure adequate security controls are in place

· Apply risk management practices in an operational environment, including audit procedures/controls and systems hardening

· Perform information security risk assessments and serve as the internal auditor for information security processes

· Review all system-related information security plans throughout the organization's network

· Respond to security incidents, conduct investigations, and recommend appropriate follow-up actions

· Work closely with SOC and development teams to ensure end-to-end security implementation, audit, and MAS regulatory compliance.

Skills & Qualifications

· Expert knowledge of Information Security Standards (ISO 17799/ISO 27002 & ISO 27001), Payment Card Industry Data Security Standards (PCIDSS), and MAS Technology Risk Management Guidelines (TRM)

· Bachelor's degree in Computer Science, Computer Engineering, or a relevant qualification

· Certifications in CISSP, CISA, CISM, ISACA, or equivalent

· At least 5 years of Information Technology experience, including 2 years in managing IT Security Operations

· Fluency in both English and Mandarin

Responsibilities:

• Spearheads continuous improvements and innovation on Integrated Digital Delivery (IDD) process.
• Directs the implementation and administration of ICT policies and procedures.
• Manages and maintains the IT and computer systems including the telecommunications system to ensure high level of service performance to all users.
• Oversees daily ICT functions to ensure the smooth running of the Company.
• Oversees the development, maintenance and on-going support for the various IT systems such as finance, HR, contract tender, etc.
• Oversees all activities relating to the installation, maintenance and management of the computer network for Town Office and Project Sites.
• Manages the communications, workstations and servers of the Company’s computer network.
• Develops, implements and maintains operating policies and approaches for all ICT systems.
• Ensures that computer hardware and telecommunications systems are up-to-date and that all software licences are all legal and updated.
• Conducts periodic checks and/or audits on the network security of the Company.
• Manages the Company’s network connectivity, internet and anti-virus systems.
• Ensures disaster recovery plans are tested annually and highlights any operational risks associated with the provisions.
• Ensures all ICT assets (hardware, software and documents) are accounted for the entire Singapore Office.
• Negotiates contracts with manufacturers for all software, hardware and consulting systems.
• Manages ICT budgets and expenditures.
• Develops training materials and procedures, and trains users in the proper use of ICT systems, hardware and software.
• Provides technical support to all users regarding the use of ICT programmes.

Requirements:

• A Bachelor’s Degree in Computer Science, Information Technology or related field.
• At least 8 years of relevant working experience.
• At least 3 years of supervisory experience.
• Relevant technical experience in onsite support and project management.
• Experience in Microsoft Windows Desktop and Server Support will be an advantage.
• Must be familiar with ISO 27000 & ERP.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to ref10@trustrecruit.com.sg or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Job description

Our client is a large, complex, quasi-government organisation, and they are in need of a Manager of Information Governance to join them on a fixed term permanent basis, initially for 12 months with opportunity to extend.

Reporting to the Head of Transformation Enablement, the role forms part of the Digital and Technology Group team. You will work closely with business units across the organisation supporting the implementation and management of enterprise data governance goals, standards, practices and change management. This position has no direct reports. The purpose of this role is to:

Develop a thorough understanding of business problems and how data management could potentially solve them to provide tangible commercial value.
Support the coordination of data governance forums and working groups, action plans and approval processes, whilst assisting the business with managing operational rigor and risk as it


... Click here to view more detail / apply for Manager of Information Governance

• Supervise and handle the daily IT operations.
• Responsible for the administration and inventory of all equipment, software and licenses.
• Ensure that all computer and related equipment is accounted for at all times.
• Assist authorized users in operational matters relating to hotel systems.
• Liaise with and maintain good working relationships with software and hardware vendors.
• Monitor and document all system activities.

Primary Responsibilities

Security Operation 

• Train Security Officers in the operation of surveillance equipment, written reports, record keeping, patrol and first aid procedures
• Disseminate all information by the Management to team members
• Conduct patrols and regular checks on all Security Officers to assure that they are alert and discharging their duties efficiently and effectively
• Conduct all criminal investigations, put up accompanying investigation papers and reports cases which occur within the Hotel
• Conduct surveillance on hotel staff to ensure that they abide by the House Rules; Keep tag on movements of staff who are classified as suspects under investigations
• Control and direct all emergency personnel traffic in response to fire, bomb threat, police assistance, injury or illness
• Inspect all Security equipment to ensure that they are in working order and that all cameras are correctly focused
• Conduct routine day-to-day checks of the following items to ensure that they are properly maintained, issued and accounted for;
• Pocket books;
• Security Desk Occurrence Book;
• Gate Passes and Security Passes;
• Keys and Key Registers;
• Post allocation for hotel and External Security
• Cultivate Informers with the intention of obtaining information of security interest that may be of immediate or future use to the Department for prevention and detection purposes
• Record all activities involving the Department in the Daily Security Report
• Provide security coverage for VIP guests
• Update Director of Security constantly on all matters of security interest affecting the Hotel and the Department
• Always be on-call, including off-duty hours, for any emergency that may Team Management
• Conduct performance review with the team
• Identify and develop team members with potential
• Constantly monitor team members’ appearance, attitude and degree of professionalism
• Conduct detailed induction programs for new employees
• Develop, conduct maintain all staff training programs for team members, focusing on their development needs, providing them with new skills to meet the changing needs of the business
• Prepare weekly staff schedules keeping in mind anticipated business, operating budgets and standards of service  
• Other Responsibilities
• Be fully conversant with hotel fire & life safety/emergency procedures
• Comply with hotel and department policies and procedures at all times
• Attend all briefings, meetings and trainings as assigned by management
• Report for duty on time wearing clean and complete uniform at all times
• Maintain a high standard of personal appearance and hygiene at all times
• Perform other reasonable duties assigned by the Management of the Hotel
•  

We are recruiting for a Security Manager to lead, co-ordinate and manage the provision of the site security service at the client's site; to ensure a safe and secure working environment for all staff and visitors

To manage a team of trained site personnel to provide a delivery of service that exceeds service level agreements

Be the point of contact for all security related matters ensuring service delivery and adequate prompt response to all incidents

Hours 40hrs per week

Applications will only be accepted with an up to date CV

Your Time at Work
Must have the Security Industry training basic qualification or equivalent industry experience.
Day to day operational management of the security department:
Daily duties include:
-Day to day rostering of personnel - This would consist of all management of holidays, sickness, sickness tracking, return to work interviews ensuring service level agreement is maintained.
-Maintain correct resource levels on all sites to ensure that both contractual and temporary work orders are satisfied to the customer's expectation and within budgetary guidelines.

Our Perfect Worker
A consistently smart appearance.

· Reliability, self-motivation, and ability to use own initiative and work without supervision.
· The ability, tact, and diplomacy to deal with people at all levels including the client, the client's staff, and visitors, in all circumstances including emergencies and other times of stress.
· Interpersonal skills.
· Self-confidence and an interest in development.
· A good level of physical fitness to enable the post holder to perform emergency response duties efficiently and effectively.

Key Information and Benefits
Key Information and Benefits
5.6 weeks paid holiday (8 of these will be in lieu of bank holidays - subject to shift pattern and accrual)
Workplace pension scheme
Life assurance benefit
Financial support for SIA Licence & renewal
Contributory Healthcare Scheme
Eyecare vouchers
Employee Discount Schemes
Progression, training & development opportunities
Refer a friend scheme

About Staffline
Staffline is the biggest recruiter in the UK and Ireland, and we believe in putting people first. Every day, we help tens of thousands of people find work in logistics, food, transport, retail, and agriculture. We can do the same for you.
We listen to the needs of our workers and always aim to offer flexible shift work and opportunities for overtime, as we know these are important to you.
Each of our locations has dedicated 24-hour OnSite support, so you can always speak to a Staffline representative. Staffline is proud to be an equal opportunity employer.
Please note that our job adverts are correct at the time of publication, but some details and job responsibilities are subject to change.
This job advert may not be copied, imitated or used, in whole or in part, by third-party websites, without prior written consent from Staffline.