Total 32,100 information security analyst job vacancies in Malaysia

Provide expert advice and guidance relating to data, analysis, interpretation and reporting to colleagues across the organisation Contribute to the development of Business Unit plans Provides, receives and presents complex information about clinical processes from which critical data are derived, reinforcing the need for accurate, complete and timely data to be recorded Will use advanced computing skills in a programming language (SQL or similar), Microsoft Office packages, database development, spreadsheets, email, internet and intranet, and the ability to adapt computing skills to any new software required. Post holder will require an in-depth knowledge of the Trusts Information systems in relation to Business Units, so that they can act as specialist contact for queries relating to information recording, reporting and interpretation in that area. Will have an ability to influence clinicians and managers in the need for and use of highly complex and sensitive specialised information about clinical performance issues. Post holder will possess a good appreciation of clinical terminology, and clinical coding and classification systems. To lead, inspire and motivate others to high performance by agreeing clear goals and objectives, providing support and guidance and creating opportunities for development To contribute to the development of a culture of high engagement, where staff are empowered and entrusted to provide the best services and care for patients To promote and facilitate innovation and continuous improvement to deliver better services for service users and patients Accountability for the leadership of post holders staff / teams / departments

• Work with internal and external stakeholders to monitor and maintain the IT security health of the Automatic Fare Collection system;
• Participate in the analysis and resolution of IT security issues and incidents related to the Automatic Fare Collection system;
• Participate in Automatic Fare Collection system projects and provide inputs on new security technologies as well as to assist in the review of technical implementations and processes in ensuring that proper IT security controls are in place; and
• Assist to develop new and update existing IT security policies, standards and guidelines for the Automatic Fare Collection system
• Recognised degree in IT or Computer Engineering with at least 3 years relevant experience in IT security;
• Good knowledge of Payment Card Industry Data Security Standard (PCI-DSS) and other security best practices for payment card applications
• Experience in SOC

Full time Experienced (relevant combo of work and education) Bachelor of Computer Science 0% As the world works and lives faster, FIS is leading the way. Our fintech solutions touch nearly every market, company and person on the planet. Our teams are inclusive and diverse. Our colleagues work together and celebrate together. If you want to advance the world of fintech, we’d like to ask you: Are you FIS? About the team: It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicatedto financial technology solutions! What you will be doing: Develop policy and standards for API security. Experience and knowledge in Application Programming Interface (API), static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management) What you bring: At least 2 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode Experience and knowledge in static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management). Knowledge of security technologies (encryption, data protection, design, privilege access, etc.) Proficiency in time management, communications, decision making, presentation and organizational skills Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules Excellent decision-making, analytical and problem solving skills Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization Experience establishing and maintaining effective working relationships with employees and/or clients Strong knowledge of development and application security Hands-on experience performing application API security assessment, static and dynamic security assessments with tools such as: Burpsuite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode, Checkmarx, etc. Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each Expert knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors Experience conducting risk assessments and performing threat modeling of applications Ability to collaborate with teams remotely What we offer you: A career at FIS is more than just a job. It’s the change to shape the future of fintech. At FIS, we offer you: A voice in the future of fintech Always-on learning and development Collaborative work environment Opportunities to give back Competitive salary and benefits Privacy Statement FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice. Sourcing Model Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company. #pridepass

Develop policy and standards for API security.

JOB DESCRIPTION

•Assist IT/Building Infrastructure Manager on the operation and control of all areas of Company Information Technology requirements.

•Assist IT/Building Infrastruture Manager on facilities management.

•IT helpdesk Technology requirements.

•Setup Software, grant and maintain access rights and backup data.

•Responsible for maintenance and backup of the Comapny's internal development

server.

•Support of legacy desktops, laptops, and servers.

•Assist service and support and product development with IT related questions pertaining

to outside networks.

•Evaluate new hardware and software to meet company requirement.

•Maintain inventory of internal licenses and track compliance.

•CCNA,MCSE,VMware Certification or equivalent preferred.

•In case it is necessary, there may be a requirement to work on weekends for maintenance purposes.

REQUIREMENTS

•Diploma in IT or info comm, equivalent or higher

•At least 2-4 year(s) of working experience in the IT field

•Preferably familiar with IT system and network security

•Full-Time position-Permanent

We are looking for an experienced Auditor/Assessor to join our IT Audit team. The ideal candidate should have proven track record in Information Security/Data Privacy related audit experience and able to provide practical recommendations to strengthen the organization’s Information Technology security posture and data privacy regime.

Shortlisted applicants will be considered for the role of Information Security Auditor / Data Privacy Assessor / IT Auditor / Lead Auditor

Key Responsibilities:

​

Execution of the Information Security and Data Privacy related audit/assessment process

Exhibits appropriate judgment regarding issue notification, prepares draft findings in accordance with relevant systems standards and drafts final audit reports for review by the Technical or Audit Manager.

Demonstrates depth and breadth of knowledge of Audit methodologies and objectives.

Demonstrates professionalism with good communication skills.

Presents audit/assessment results in an objective and unbiased manner.

Writes opinions reflecting relevant facts that lead to logical conclusions.

Ensure compliance with ISOCert's policy & procedures

Perform administrative duties according to plan and organize audits.

Perform audit on client’s existing processes and Information Security and Data Privacy systems.

Investigate client’s business process controls, application controls and IT controls and benchmark them according to regulations and industry standards.

Pre-requisites:

Degree or Diploma in IT / Computing / Information Security or equivalent qualifications

Minimum 3 years of relevant working experience for Degree holders / 5 years of related working experiences for Diploma holders (preferably specializing in IT / IT Security field).

Candidates with knowledge and experience in ISO 27001, ISO 27701, DPTM and other management system related standards are preferred.

Preferably with Lead Auditor Training Certification in ISO 27001:2013 / Certified Information Security Auditor – CISA and PDPA related training.

Those with auditing experience will be an added advantage.

Good report writing skills

Excellent communication and presentation skills.

Responsibilities:

• Spearheads continuous improvements and innovation on Integrated Digital Delivery (IDD) process.
• Directs the implementation and administration of ICT policies and procedures.
• Manages and maintains the IT and computer systems including the telecommunications system to ensure high level of service performance to all users.
• Oversees daily ICT functions to ensure the smooth running of the Company.
• Oversees the development, maintenance and on-going support for the various IT systems such as finance, HR, contract tender, etc.
• Oversees all activities relating to the installation, maintenance and management of the computer network for Town Office and Project Sites.
• Manages the communications, workstations and servers of the Company’s computer network.
• Develops, implements and maintains operating policies and approaches for all ICT systems.
• Ensures that computer hardware and telecommunications systems are up-to-date and that all software licences are all legal and updated.
• Conducts periodic checks and/or audits on the network security of the Company.
• Manages the Company’s network connectivity, internet and anti-virus systems.
• Ensures disaster recovery plans are tested annually and highlights any operational risks associated with the provisions.
• Ensures all ICT assets (hardware, software and documents) are accounted for the entire Singapore Office.
• Negotiates contracts with manufacturers for all software, hardware and consulting systems.
• Manages ICT budgets and expenditures.
• Develops training materials and procedures, and trains users in the proper use of ICT systems, hardware and software.
• Provides technical support to all users regarding the use of ICT programmes.

Requirements:

• A Bachelor’s Degree in Computer Science, Information Technology or related field.
• At least 8 years of relevant working experience.
• At least 3 years of supervisory experience.
• Relevant technical experience in onsite support and project management.
• Experience in Microsoft Windows Desktop and Server Support will be an advantage.
• Must be familiar with ISO 27000 & ERP.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to ref10@trustrecruit.com.sg or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Full time permanent - Government agency - Cyber Security Analyst Your new company This government agency is looking for a Cyber Security Analyst to join their cyber security team in a full-time permanent role. You will have the opportunity of working for a government organisation located in Sydney CBD. Your new role As a Cyber Security Analyst, your role is to safeguard the information and systems of the institution from cyber threats. This involves tracking, examining and reporting on various security events, as well as handling escalations from the external security services provider to help in detecting and responding to security incidents, and managing cyber security products. You will also be responsible for:

Analyse and continually monitor security events and escalations from the managed security service provider and other network and endpoint security systems to identify potential threats and vulnerabilities, aid in remediation activities
Assist with vulnerability assessment scanning, reporting processes and tracking remediation of discovered vulnerabilities
Support the Cyber Security Team in the timely management of cyber security incidents, including assisting in implementing mitigation measures and reporting to internal stakeholders

What you'll need to succeed As a Cyber Security Analyst, you will be required to possess the following skills and experience:

Demonstrated experience in Email and Web Security, Endpoint Detection and Response and Microsoft 365 Security products
Demonstrated knowledge of ISO27001 and ACSC Essential 8 framework
Demonstrated experience in administration of technical tools to support security operations (SIEM, Advanced Threat Detection, Vulnerability Management, Firewalls, IDS, IPS, WAF, EDR)
Excellent written and verbal communication skills.

What you'll get in return

Full time permanent role with a government agency
Hybrid work environment
Great culture and a flexible workplace

What you need to do now You must have full working rights in Australia to apply for this role. If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or contact Lola Costa on 02 9249 2286 or Lola.Costa@hays.com.au for further information. If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career. Please click here to apply.

Venues NSW is a commerically focused agency of the NSW Government, encompassing the Sydney Cricket Ground and Allianz Stadium as well as major sporting and cultural stadiums and precincts in Sydney, Olympic Park, Parramatta, Newcastle and Wollongong. The network of stadiums and entertainment centres host in excess of 5 million people a year at more than 500 events and is a key contributor to the economy.   Venues NSW takes an intergrated approach to our stadia and entertainment centres by developing partnerships with sporting codes, the entertainment and event industry, audiences, local businesses, NSW Government agencies and community groups. Our network throughout NSW allows us to combine internal resources and harness a vast employee skillset all of which helps us deliver key projects and secure outstanding content.   ABOUT THE ROLE We have an excellent opportunity for enthusiastic and customer service focused individuals to join our Event Security team. This role has responsibility to coordinate…

Click here to view more detail / apply for Security - Event Security Coordinator

This is a 12 months contract assigned to our client

Work Location: To be confirmed (during interview)

Salary Range : $5,000-$7,500

Job Description

Top Mandatory skills

1. Azure native security

2. Security Incident response

3. Familiar with at least 2 of below security tooling upkeeping:

SIEM, Endpoint Detect and Response, Endpoint Anti-virus, Next Gen Firewall, VA Scanner

Skills which are good to have / optional

1. Hardening CIS benchmark

2. Impact analysis report drafting, testing of patches

3. Government compliance standards familiarity

4. Knowledge on Cloud Application Architecture

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

Cyber Security Analyst Back to search results Apply now Job Number: 80629-184570 Work type: Permanent - Full Time Location: Brisbane Categories: Information Technology Location:  Brisbane About the role: Join Aurizon's Cyber Security Group as a Cyber Security Analyst! In this role, you'll play a crucial part in safeguarding Aurizon's assets from cyber security threats by implementing effective cyber security controls and maintaining a highly capable incident detection and response capability. Key Responsibilities: Onboard new data sources and asset types to the SIEM/logging solutions. Analyse the latest malware and vulnerability discoveries to enhance Aurizon's capabilities. Tune existing detection rules to maximize threat and incident detection capability. Develop enhanced detection rules and capabilities, with a focus on automating defence capabilities where possible. Create playbooks and response strategies for detection rules. Improve the ingestion, consolidation, and utilization of threat intelligence within existing SOC operations. Support the existing threat hunting program within SOC operations. Assist in all incident response…

Click here to view more detail / apply for Cyber Security Analyst

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

We need a technology specialist to join our in-house Information Security Services team in a long term position. The successful candidate will design, develop, test, operate and support security technologies to enhance the security strength of our organization.

We are looking for a responsive and highly productive technology professional who is passionate in solving security challenges and embracing new technologies.

• Evaluate, design, build, test, operate and support security solutions for protecting the Bank’s information assets hosted in data centers and public clouds (e.g. AWS, GCP, Azure)
• Design and develop highly resilient and secure systems
• Integrate, manage, and operate hardware security modules
• Integrate with other application/platforms to deliver security services
• Build, integrate, test, and deliver solutions using a CI/CD pipeline
• Support other applications teams in the integration with security services
• Perform production monitoring and support, as well as responding to incidents
• Continuously enhance security systems and automate processes to increase resiliency and productivity

Requirements

• Working experience developing applications or managing infrastructure services for public cloud such as AWS and GCP
• Programming skills in at least Java and one other programming language: Python, JavaScript (NodeJS), GO
• Working experience as a software developer (in full stack development, cryptography, APIs) or systems implementor/integrator (implementing Identity and Access Management software, data protection solutions) and preferably in the information security domain
• Experienced in performing requirements gathering, system analysis and design, application development, application testing (functional, performance), deployment using CI/CD pipeline, and production support
• Bachelor’s degree in Computer Science or equivalent
• Able to travel on a need to basis
• Functional / Technical Competencies
• Possess knowledge of information security principles, secure coding practices, and cryptography
• Possess strong technical knowledge in operation systems, networking, databases, Internet technologies, public cloud, private cloud and containers
• Possess knowledge about designing and developing highly resilient applications
• Working knowledge of Linux and shell scripting
• Working knowledge of using a CI/CD pipeline

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognizes your achievements.

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

We need a technology specialist to join our in-house Information Security Services team in a long term position. The successful candidate will design, develop, test, operate and support security technologies to enhance the security strength of our organization.

We are looking for a responsive and highly productive technology professional who is passionate in solving security challenges and embracing new technologies.

• Evaluate, design, build, test, operate and support security solutions for protecting the Bank’s information assets hosted in data centers and public clouds (e.g. AWS, GCP, Azure)
• Design and develop highly resilient and secure systems
• Integrate, manage, and operate hardware security modules
• Integrate with other application/platforms to deliver security services
• Build, integrate, test, and deliver solutions using a CI/CD pipeline
• Support other applications teams in the integration with security services
• Perform production monitoring and support, as well as responding to incidents
• Continuously enhance security systems and automate processes to increase resiliency and productivity

Requirements

• Working experience developing applications or managing infrastructure services for public cloud such as AWS and GCP
• Programming skills in at least Java and one other programming language: Python, JavaScript (NodeJS), GO
• Working experience as a software developer (in full stack development, cryptography, APIs) or systems implementor/integrator (implementing Identity and Access Management software, data protection solutions) and preferably in the information security domain
• Experienced in performing requirements gathering, system analysis and design, application development, application testing (functional, performance), deployment using CI/CD pipeline, and production support
• Bachelor’s degree in Computer Science or equivalent
• Able to travel on a need to basis
• Functional / Technical Competencies
• Possess knowledge of information security principles, secure coding practices, and cryptography
• Possess strong technical knowledge in operation systems, networking, databases, Internet technologies, public cloud, private cloud and containers
• Possess knowledge about designing and developing highly resilient applications
• Working knowledge of Linux and shell scripting
• Working knowledge of using a CI/CD pipeline

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognizes your achievements.

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Drive security projects across the region which involves vendor management, collaboration with stakeholders, business users and application teams
• Lead overall end-to-end project delivery
• Keep abreast of relevant technology to improve service delivery
• Identify areas of improvement through process improvement and/or automation.
• Provide technical expertise and guidance to internal teams on cybersecurity-related matters.
• Contribute to the continuous improvement of security processes, tools, and technologies.

Requirements

• Degree in computer science, engineering, or other computer-related field of study.
• CISM, CISSP, GIAC, or relevant security certification would be an advantage.
• Prior experience in implementing/managing security solution
• Process strong interest in new system development/evaluation.
• Ability to work in a fast-paced environment and keep pace with technical/operational innovation.
• Good communication skills.
• Self-motivated with ability to work with minimal supervision
• Experience in managing endpoint-related security applications such as Anti-Virus, EDR and DLP
• Knowledge and understanding of emerging risk areas, e.g. mobile, remote access, wireless technologies, DLP, Windows and Unix-based operating systems, etc.

Apply now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.