Total 2 Director/C-Level Information Technology job vacancies

The incumbent will be managing team members in SG/Cyber Technology Centre (Malaysia)/Batam Technology Centre (Indonesia) and responsible for defining and overseeing the organization’s application security architecture, ensuring alignment with target architectures and modern development practices.

WHAT YOU’LL BE DOING:

1. Strategic Oversight of Security Architecture

• Define, design, and implement the target application security architecture in line with organizational goals and industry/regulatory standards.
• Establish a comprehensive application security strategy, ensuring seamless integration into enterprise architecture and technology roadmaps.
• Conduct architectural reviews to identify risks and recommend mitigation strategies, focusing on secure and scalable solutions.

2. CI/CD Pipeline Security

• Lead the integration of security controls into CI/CD pipelines, ensuring automated detection and remediation of vulnerabilities.

3. Secure Software Development Lifecycle (SDLC)

• Develop and enforce secure development guidelines, ensuring security is incorporated at every stage of the SDLC.
• Provide leadership in threat modelling, secure coding practices, and software code quality management across development teams.
• Work with application teams to prioritize security requirements, balancing business objectives with technical risks.

4. Vulnerability Management and Mitigation

• Oversee the overall strategy for SAST, DAST, to identifying and remediating vulnerabilities.
• Ensure timely resolution of identified issues, coordinating efforts across development, QA, and DevOps teams.
• Maintain and communicate detailed metrics and dashboards on the security posture of applications and pipelines.

5. Cross-Functional Collaboration

• Partner with application teams to align security architecture with business needs and project timelines.
• Act as the primary liaison between technical teams and executive leadership, effectively conveying security risks and architectural priorities.

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Bachelor’s degree of computer science, Information Security, or a related field. A Master’s degree would be an added advantage.
• Information Systems Security professional certifications, such as CISSP, CSSLP, CEH, OSCP or CREST.
• At least 15 years of experience in cybersecurity, with a focus on application security, security architecture, and secure development practices.
• Proven expertise in designing and implementing security controls within CI/CD pipelines in Agile and DevOps environments.
• Demonstrated success in defining and overseeing secure application architectures for cloud-native and hybrid environments.
• Deep understanding of secure software development lifecycle (SDLC) methodologies and best practices.
• A team-player with systematic problem-solving approach, and have sense of ownership and drive.
• Must have strong people skill to lead a team effectively and demonstrable experience of working at the most senior levels of large and complex organizations.
• Excellent interpersonal skills and stakeholders management.
• Always have customer in mind when dealing with any situations/projects/deliverables.
• Interprets customer needs, assesses requirements and identifies solutions to non-standard requests.
• Able to negotiate with, influence and engage others in complex and conflicting situations across multiple parties to drive a positive outcome.
• Good communication skills and the communication network of the incumbent is expected to be internally within the enterprise (80%) and external with Vendors and Service Providers (20%).

• Exposure to latest technologies such as cloud security 
• High-impact role with autonomy to make key decision for security roadmap and strategy

About the company

Our client is one of the fastest growing company in this industry. They are looking for a leadership-caliber professional to spearhead their cybersecurity division and protect their digital infrastructure.

About the job

Strategic Leadership: Define and execute the long-term information security roadmap and governance frameworks based on international standards.

Operational Oversight: Manage the dedicated security team, focusing on real-time monitoring, threat detection, and rapid incident response.

Risk & Compliance: Lead comprehensive risk assessments and ensure all systems adhere to global data protection regulations and client-specific requirements.

Technical Validation: Coordinate regular security audits, including vulnerability scans and penetration testing, to ensure robust system defense.

Cross-Functional Integration: Partner with Engineering and IT departments to embed security protocols directly into the product development lifecycle.

Stakeholder Reporting: Act as the primary advisor to executive leadership regarding the organization’s security posture and emerging risk landscapes.

Skills and experience required

As a successful applicant, you will have at least 10 years of experience in Cyber Security. Proven track record in managing overall security team for 4 years is required for this role. Exposure to information security framework such as  ISO 27001 and NIST is required for this role. 

Experience in cloud security such as Azure or AWS will be highly preferred. 

Whats on offer
This is an excellent opportunity to grow together with one of the fastest growing company, 

To apply online please use the 'apply' function, alternatively you can reach me at https://www.linkedin.com/in/hoonteck-nologyrecruitment. (EA: 94C3609/ R1219669)