Total 61 Security Analyst job vacancies in Kuala Lumpur

Job Description

Security Engineer's role is to support the product team in performing product/solution installation, testing, documentation, and support.

Responsibility:

• Provide technical consulting, implementation, support and service delivery to our customers on Identity Access Management (IAM) and Single Sign-On (SSO) solutions.
• Perform system installation, implementation & upgrade services of IAM/SSO solutions.
• Involve in full cycle of project implementation activities - business requirement information gathering, prepare & finalize solution design, solution implementation & development, SIT/UAT, prepare system documentation & production cutover and system go live.
• Involve in post-implementation production support/ad hoc to ensure all the problems/issue solved within the target SLA.
• Monitor and analyze project risk and provide status update report to customer.
• Support pre-sales consulting activities; eg: product presentation, demo and POC.
• Conduct technical training to customers on IAM/SSO solution. 
   

Required Skills

• Candidate must possess at least a Diploma, Advanced/Higher/Graduate Diploma, Bachelor's Degree, Post Graduate Diploma or Professional Degree in Engineering (Electrical/Electronic), Computer Science/Information Technology, Science & Technology or equivalent.
• 1 to 3 years of experience in managing the development, implementation, practice and maintenance of IAM/SSO solutions.
• Hands-on experience with knowledge IAM/SSO solutions tools and platforms.
• Excellent written and communication skills.
• Excellent analytical and problem-solving skills.

Additional Notes

• Understanding of IT infrastructure components, including servers, networks, databases, and other relevant technologies.
• Knowledge of scripting languages (e.g., Bash, PowerShell, Python) and automation tools.

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Central location
• Flexible working hours
• Casual dress code
• Medical insurance
• Personal leave
• Open culture
• Personal development opportunities

Job Description:-

- To conduct vulnerability assessment/penetration testing in its skillset and experience to gain access and exploit vulnerabilities in the company’s infrastructure.
- To maintain the Security Operations Manual up to date for use by all IT security personnel to cover duties.
- To conduct computer forensic analysis and understand the impact on the business.
- To research tools, techniques, countermeasures and trends in network vulnerabilities, data hiding, and network security.
- Continuous development of threat hunting and proactively identifying security incidents before they occur.
- To design and support the overall cybersecurity architecture of the enterprise systems environment.
- Applying social engineering and phishing techniques to manipulate employees into exposing or revealing information to compromise their machines.
- Maintaining standard information security policy, procedure, and documentations.
- Monitor identity and access management, including monitoring for abuse of permissions by authorised system users.
- Involve in IT Security project management and assist in identifying and evaluating vendor IT security solutions.
- To ensure compliance with the provisions of the IT Security Policies and regulatory guidelines.
 

Job Requirements:-

- Professional Certificate/Diploma/Degree in Computer Science/Information Technology or equivalent.
- 8 to 10 years related experience in IT Security and with proven minimum 4 years working experience in managing IT security projects.
- Industry recognized security certifications, such as CISSP, CEH etc. preferred.
- Knowledge in IT Security methodology, Bank Negara Guidelines, PCI DSS, Risk - Management and IT auditing will be an added advantage.
- Technical knowledge of database and operating system security.
- Knowledge of network protocol (WAN,LAN) and security concerns within TCP/IP environment.
- Thorough understanding of the latest security principles, techniques and protocols.
- Familiar with web related technologies.
- Ability to present ideas in business-friendly language.
- Ability to prioritize, track and manage tasks and action items.
- Excellent communication, writing, analytical thinking, strong team player and an individual contributor too.

Perks & Benefits

• Annual leave
• Medical
• Nearby public transport

Job Requirements

• Bachelor’s Degree/ Adv Diploma/ Dploma in business or in the related field 
• With minimum of 2 to 3 years of experience in business analysis or a related field would be an advantaged
• Exceptional analytical and conceptual thinking skills.
• Excellent documentation skills.
• Experience creating detailed reports and giving presentations would be an advantaged
• Competency in Microsoft applications including Word, Excel, and Outlook
• Open for Malaysian Only

Perks & Benefits

• Nearby public transport
• Central location
• Free snacks / Happy hours
• Regular team activities
• Company trips
• Open culture
• Personal development opportunities

職位描述

安全工程師的職責是支援產品團隊執行產品/解決方案安裝、測試、文件記錄和支援。

責任：

• 為我們的客戶提供身分存取管理 (IAM) 和單一登入 (SSO) 解決方案的技術諮詢、實施、支援和服務交付。
• 執行IAM/SSO解決方案的系統安裝、實施和升級服務。
• 參與專案實施活動的整個週期 - 業務需求資訊收集、準備和最終確定解決方案設計、解決方案實施和開發、SIT/UAT、準備系統文件和生產切換以及系統上線。
• 參與實施後生產支援/臨時支持，以確保所有問題/問題在目標 SLA 內得到解決。
• 監控和分析專案風險並向客戶提供狀態更新報告。
• 支持售前諮詢活動；例如：產品演示、演示和 POC。
• 為客戶提供有關 IAM/SSO 解決方案的技術培訓。
  

所需技能

• 候選人必須至少擁有工程（電氣/電子）、電腦科學/資訊技術、科學與技術或同等學歷的文憑、高級/高級/研究生文憑、學士學位、研究生文憑或專業學位。
• 擁有 1 至 3 年管理 IAM/SSO 解決方案的開發、實施、實踐和維護的經驗。
• 擁有 IAM/SSO 解決方案工具和平台知識的實務經驗。
• 優秀的書面和溝通能力。
• 出色的分析和解決問題的能力。

補充筆記

• 了解 IT 基礎架構元件，包括伺服器、網路、資料庫和其他相關技術。
• 了解腳本語言（例如 Bash、PowerShell、Python）和自動化工具。

津貼和福利

• 津貼（旅費、交通費等）
• 中心位置
• 彈性的工作時間
• 休閒著裝要求
• 醫療保險
• 事假
• 開放文化
• 個人發展機會

工作要求

• 商業或相關領域的學士學位/高級文憑/文憑
• 具有至少 2 至 3 年商業分析或相關領域經驗者優先
• 優秀的分析和概念思考能力。
• 出色的文檔編寫能力。
• 有建立詳細報告和進行簡報的經驗者優先
• 具備 Microsoft 應用程式（包括 Word、Excel 和 Outlook）的能力
• 只限馬來西亞人開放

津貼和福利

• 附近的公共交通
• 中心位置
• 免費小吃/歡樂時光
• 定期團隊活動
• 公司旅行
• 開放文化
• 個人發展機會

AML/CFT 

• Supports in establishing and maintaining AML/CFT standards, policies & procedures in accordance with applicable laws and regulations and assists the Manager in the implementation of program for AML/CFT.
• Support client screening and AML/CFT transaction monitoring & alerts, including monitoring Client activities and identifying suspicious transactions.
• Support all AML/CFT related matters and compliance, including regulatory, audit and similar inspections.
• Support the Company’s AML/CFT compliance and function to identify, manage, monitor and mitigate exposure to compliance risk.
• Assist in liaising with the relevant regulatory bodies to ensure that the Company is always in compliance with all laws and regulations.
• Support the Designated Compliance Officer at the various departments on Anti-Money Laundering and Counter-Financing of Terrorism matters.
• Undertake any other duties as assigned by the Compliance Manager.

REGULATORY COMPLIANCE (Supporting Function)

•  Support the Compliance Section in instilling a ‘compliance aware” culture within the Company.
• Assist in ensuring Company’s compliance with laws, rules and regulations set by statutory and regulatory bodies.
• Support in monitoring the implementation of the Company’s compliance requirement (eg: BNM’s regulated products, FSA, AML/CFT, JSOX, etc).
• Assist in ensuring the Company’s compliance with the laws, rules and regulations set by the statutory and regulatory bodies.
• Assist in the implementation of compliance training program.
• Support in reviewing the Company’s documents (policies/procedures) inclusive of documents related to BNM’s regulated products.
• Support the Compliance Section on regulatory compliances, including the compliance of Anti-Money Laundering and Counter-Financing of Terrorism (AML/CFT).

Job Requirement 

• Bachelor’s Degree in Management/Business Administration/Legal/Compliance or other related field.
• At least 1 year(s) and above of working experience in Compliance Department/Audit.
• Experience in a compliance function is preferred, and preferably gained from the banking or financial credit services industry.

Perks & Benefits

• Nearby public transport
• Casual dress code
• Medical insurance
• Sabbatical leave

職位描述：-

- 根據其技能和經驗進行漏洞評估/滲透測試，以存取和利用公司基礎設施中的漏洞。
- 保持安全操作手冊處於最新狀態，以供所有 IT 安全人員履行職責時使用。
- 進行電腦取證分析並了解對業務的影響。
- 研究網路漏洞、資料隱藏和網路安全的工具、技術、對策和趨勢。
- 持續發展威脅追蹤並在安全事件發生前主動辨識。
- 設計和支援企業系統環境的整體網路安全架構。
- 應用社會工程和網路釣魚技術來操縱員工暴露或洩漏資訊以危害他們的機器。
- 維護標準資訊安全政策、程序和文件。
- 監控身分和存取管理，包括監控授權系統使用者濫用權限的情況。
- 參與 IT 安全專案管理並協助識別和評估供應商 IT 安全解決方案。
- 確保遵守 IT 安全政策和監管指南的規定。

工作要求：-

- 電腦科學/資訊科技專業證書/文憑/學位或同等學歷。
- 擁有 8 至 10 年 IT 安全相關經驗，並擁有至少 4 年管理 IT 安全專案的工作經驗。
- 有業界認可的安全認證，如CISSP、CEH等優先。
- 了解 IT 安全方法、國家銀行指南、PCI DSS、風險管理和 IT 審計將是一個額外優勢。
- 資料庫和作業系統安全的技術知識。
- 了解 TCP/IP 環境中的網路協定（WAN、LAN）和安全性問題。
- 透徹理解最新的安全原理、技術和協議。
- 熟悉Web相關技術。
- 能夠用商業友善的語言表達想法。
- 能夠確定優先順序、追蹤和管理任務和行動項目。
- 優秀的溝通、寫作、分析思維、強大的團隊合作精神和個人貢獻者。

津貼和福利

• 年假
• 醫療的
• 附近的公共交通

Key Accountabilities

• Create designs for technical solutions to resolve business problems and try out components of new systems for efficiency
• Reach out to clients and project leaders in the course of work in order to identify and evaluate user and business requirements
• Ensure clean and accurate documentation that may include aspects such as business requirements, client requirements, and technical specifications, and write findings in form of reports
• Ensure that all documents are safely kept and accessible for future reference
• Assist with new releases, and approve all User Acceptance Testing
• Oversee implementation of a new system including data migration
• Facilitate professional and constant communication with overall users on the status of production problems that might arise and inform them about ways of resolving issues
• Carry out research on how IT systems are used and suggest ways for systems improvement and efficiency
• Collaborate with the development team to build the design and specification of the permanent fix
• Communicate the cost (if any) and timeline with the customer and follow through to ensure timely delivery
• Test the product to ensure that it meets user requirements, technically well built, and does not impact existing modules before roll-out,
• Upsell and build value for customers by proposing new features or services.

Requirements

• Bachelor's Degree, Post Graduate Diploma, Professional Degree
• Strong skills in working with relational databases
• Strong skills and ability to troubleshoot issues quickly, and find solutions to solving them independently in a timely manner
• Great knowledge of IT processes and willingness to constantly update knowledge
• Ability to multi task, working on more than one issue simultaneously
• Able to carry out tasks with little or no supervision

Perks & Benefits

• Nearby public transport
• Casual dress code
• Free snacks / Happy hours
• Regular team activities
• Medical insurance

主要責任

• 創建技術解決方案的設計以解決業務問題並嘗試新系統的組件以提高效率
• 在工作過程中與客戶和專案負責人聯繫，以確定和評估使用者和業務需求
• 確保文件清晰、準確，其中可能包括業務要求、客戶要求和技術規格等方面，並以報告的形式編寫調查結果
• 確保所有文件均安全保存並可供將來參考
• 協助新版本的發布，並批准所有使用者驗收測試
• 監督新系統的實施，包括資料遷移
• 促進與整體用戶就可能出現的生產問題的狀態進行專業和持續的溝通，並告知他們解決問題的方法
• 研究 IT 系統的使用方式，並提出系統改進和效率的建議
• 與開發團隊合作建構永久修復的設計和規範
• 與客戶溝通成本（如果有）和時間表並跟進以確保及時交付
• 在推出之前測試產品以確保其滿足用戶要求、技術良好且不會影響現有模組，
• 透過提出新功能或服務來追加銷售並為客戶創造價值。

要求

• 學士學位、研究生文憑、專業學位
• 具有使用關聯式資料庫的強大技能
• 較強的技能和快速排除問題的能力，並能及時獨立找到解決方案
• 對 IT 流程有豐富的了解並願意不斷更新知識
• 能夠同時處理多個任務，同時處理多個問題
• 能夠在很少或沒有監督的情況下執行任務

津貼和福利

• 附近的公共交通
• 彈性的工作時間
• 休閒著裝要求
• 免費小吃/歡樂時光
• 定期團隊活動
• 醫療保險

• Responsible for the Technology Risk Management function for ACSM in managing technology risk and enhancing technology resilience.
• To oversight the current and emerging technology risk, cyber risk and security which could potentially impact the ACSM’s risk profile.
• To ensure information assets and technologies are adequately protected.
• Identify and report on technology risk including security breaches, to initiates correction action and regulatory requirements.
• Facilitate independent technology risk assessment which has been assigned by CISO.
• Act as coordinator and point-of-contact in cyber risk management activities (i.e. cyber risk identification, prevention, detection and recovery)
• Responsible for staying abreast of the latest cyber security practices, technologies, incidents and emerging threat.
• Oversee incident response planning, as well as the investigation of cyber security breaches, and assists with disciplinary and legal matters associated with the breaches as necessary.
• Participate in development and implementation of the appropriate and effective controls to mitigate identified threats and risks.
• Create and maintain and IT risk register to ensure that all identified Technology risk factors are accounted for.
• Participate in IT project and initiatives to bring pro-active risk management focus into solutions.
• Assists in the research, development, communication, maintaining and working with the operational unit on the enforcement of IT security architecture, policies, procedures, solution and standards with the IT division.
• Conduct the ACSM awareness initiatives in relation to cyber risk and technology risk.

Job Requirement :

• Minimum degree in computer science or equivalent technical academic.
• Be appropriate certified in security domain.
• Have a minimum of three years of experience in IT Risk management and information Technology.

Perks & Benefits

• Nearby public transport
• Medical insurance
• Personal leave

責任

✍ 負責與網路安全要求和新興相關ICT技術相關的端到端整體解決方案和服務活動，以實現最佳水準的網路安全機密性、完整性和可用性標準。
✍ 負責網路安全指南、基準、標準和流程的持續維護、監控和更新。這包括預測成長以確保可擴展性，評估基準、觀察或其他行業最佳實踐帶來的增強價值，並在需要時納入變更。
✍ 負責建立和維護業務工作流程和技術的現況和未來安全流程和工作指導。
✍ 開發並推薦知識開發以及文件化實務和工程知識抵押品的創建。
✍ 技術專家提供全面的解決方案和工程，以建構技術解決方案的技術要求。
✍ 提供IT 解決方案工程和設計建議的IT 安全諮詢和審查服務，以確保解決方案符合IT 安全要求，從而保護客戶的IT 基礎設施和系統。
✍ 提供適用於各種開發技術的技術專業知識和諮詢。
✍ 負責為客戶的整個網路和系統基礎設施分析、評估和推薦最佳的資訊安全技術和解決方案。
✍ 負責從安全角度和角度進行符合客戶安全控制和基線的解決方案評估、POC、UAT。
✍ 就資訊安全問題提供建議和諮詢，並為各個內部團隊和部門提供建議。
✍ 對新出現的內部和外部威脅、技術趨勢和減輕 IT 安全風險的方向進行研究和環境掃描，並透過跨 IT 部門和職能部門的協作進行評估，以改善 IT 安全基礎設施和服務。
✍ 規劃、研究、分析、評估和推薦資訊安全技術解決方案、方向和採用。
✍ 研究和開發新的資訊安全技術以改善和創造商業機會。
✍ 與外部 IT 安全專家和其他 IT 組織建立和維護策略關係/網路和協作，以衡量和改善客戶向利害關係人提供的網路安全基礎設施服務。

要求

✍ 電腦科學、資訊系統、工程學、軟體工程或任何相關學科的學士學位。
✍ 在技術相關領域擁有約 8-10 年的經驗，並具有相關 IT 安全領域和工程的具體專業知識。
✍ 具有撰寫和支援策略性商業策略的經驗，並具有以業務為中心的心態。
✍ 清楚地了解如何根據特定的架構原則將安全架構和設計轉化為詳細的技術組件。
✍ 此角色需要掌握安全工程生命週期並了解企業安全架構環境。
✍ 網路安全治理、指南和風險以及網路安全解決方案領域的基礎知識。
✍ IT 網路的基礎知識以及對 OT 和物聯網架構和工程的更好理解。
✍ 具有強化練習和技術合規性保證練習的經驗。

工作亮點

✅ 僅限馬來西亞本地人。
✅ 每週工作 5 天，採用混合工作安排。
✅ 極佳的成長和職涯發展機會。
✅ 有競爭力的薪資待遇。
✅ 偉大的跨國公司（能源部門）工作文化。

• 對產業/業務領域、相關IT功能產品及應用等的概念認知
• 能夠透過多個場景識別和定義需求，以評估真正的業務問題，並隨後與業務和最終用戶驗證任何更新
• 能夠理解、解釋並向業務、最終用戶和技術團隊有效傳達需求和業務場景
• 需要人壽保險經驗
• 需要 Integral Life(Life/Asia) 或其他基於 CSC SMART/400 的申請經驗
• 良好的英語口語和書面能力
• 擁有Integral Life（人壽/亞洲）保險產品表設定經驗為優勢。
• 至少 1 至 4 年相關經驗。

津貼和福利

• 中心位置
• 開放文化

We're currently looking for an experienced System Analyst to join our project team from Hong Kong to work on a banking customer's project in Singapore and Malaysia.

In this role, you will be expected to:

• Liaise with the banking customer and gather user requirement
• Convert the user requirement to technical specification document and determine operational feasibility.
• Assign the development work to developers in Shenzhen
• Perform code review
• Develop software verification plans and quality assurance procedures.
• Perform end-to-end testing before delivery.

Requirements:

• Possess at least a Professional Certificate/ Advance Diploma/ Bachelor's degree in Computer Science/ Software Engineering or equivalent qualification.
• At least 5 years experience in the software engineering role. Working experience in the banking IT solutions field or Forex knowledge will be an added advantage.
• Basic understanding of software architecture, and microservices.
• Programming Language: Java with experience with J2EE based distributed applications (including Multi-Threading, JDBC/JPA, JMS, JAX-WS, REST services, SOAP web services, Java Message Service, Spring, JVM & Garbage collector tuning, etc).
• Database: DB2, Oracle, MySQL
• Language requirement: Proficiency in the Mandarin language is a MUST as this position will be required to communicate with Shenzhen colleagues on a daily basis.

You may also contact us at +603-2276 2929/ 3939 to understand more about the job.

Perks & Benefits

• Nearby public transport
• Central location
• Flexible working hours
• Casual dress code
• Regular team activities
• Open culture

Role & Responsibilities:

• Implement information / IT security engagements for clients
• Provide delivery expertise on information security projects. This could be on technical or process aspects (such as Information Security Management Systems (ISMS) or ISO 27001, Business Continuity Management / IT Disaster Recovery Management or ISO 22301/ ISO 27301, Data Loss Prevention (DLP), Identity and Access Management (IAM), cloud security, cyber security design, tools and solutions, security strategy and security project management).
• Experience in the identification, assessment, mitigation and management of information security risks and issues across the information security spectrum.
• Identify best practices for Information Security into technically feasible and user friendly deliverables and communicate to clients and their Information Security staff.
• Gain understanding of key customer issues and help create proposals as required.
• Build own knowledge and competency in cyber security and gain alignment and understanding of at least one industry.

Qualifications:

• Degree in any discipline and/or MBA from a recognised institution; IT Degree preferred.
• Related certifications are a plus e.g. CISSP, CCSP, SSCP, GSLC, GISP, CISM, CRISC, CGEIT, CISA, CCSK, CEH, CCNA, ISO 27001 Lead Auditor, etc.
• Good overall understanding of IT.
• Strong understanding of information security & regulatory standards/ frameworks; e.g. ISO/IEC 27001, COBIT, ITIL, PCI-DSS, NIST Cyber Security Framework, GPIS1, etc.
• Good technical knowledge on at least one of the following areas:

-          Data Security, Privacy, Classification and Data Loss Protection.

-          IT Disaster Recovery Planning and Business Continuity Management.

-          Network security architecture, management and controls including firewall, routers, IPS etc.

-          Threat Intelligence & Advanced Persistent Threats (APT).

-          Security Strategy and Roadmaps.

-          Security Policy, Standard and Framework.

-          Information Security Management Systems.

-          Log Management and SIEM.

-          Identity and access management solutions and implementation.

- Cloud security.

• Familiarity and experience in security standards and regulatory frameworks (e.g. ISO/IEC 27001, ITIL, GPIS1, PCI-DSS, etc.)

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Nearby public transport
• Central location
• Flexible working hours
• Personal leave
• Open culture
• Personal development opportunities

Role & Responsibilities:

• Work with technical project team to implement technical solution aligning to client’s requirement, project scope and timeline.
• Provide deployment, documentation, support of project-wide information security solution, practices and policies.
• Serve as first point of contact for security solutions’ technical support.
• Act as technical subject matter to perform technical issue troubleshooting, root-cause analysis, issue resolution or escalation.
• Contribute to building the organization security solutions technical knowledge and cybersecurity knowledge.
• Traveling to customer site to implement solution or troubleshooting system issue when required.

Qualifications:

• Possess a degree or higher degree in IT, Information Security or related field
• Good understanding of cybersecurity framework or regulatory requirement such as NIST CSF, ISO27001, Mitre ATT&CK framework and etc.
• Strong communication skills verbal and written in English and Bahasa Malaysia.
• Continuous learning attitude to develop skills in cyber security and appetite to learn new technologies/security solutions.
• Highly organized, self-motivated, have good time management and able to work under minimum supervision.

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Nearby public transport
• Central location
• Flexible working hours
• Open culture
• Personal development opportunities