Assistant Manager, Cybersecurity Assurance
Summary
Leads cybersecurity assurance at a Malaysian payments company: running cyber drills, control assurance reviews, VAPT/red-team and compromise assessments, threat intelligence, phishing simulations, and incident response, while meeting Bank Negara Malaysia and PayNet obligations. Requires 7+ years in information security or IT risk.
Salary: RM 10,000 – RM 14,000 per month
Job Responsibilities:
Conduct cyber drills and assess and improve cyber incident response and recovery processes to strengthen cyber incident governance.
Carry out control assurance reviews to assess the effectiveness of controls and processes.
Validate remediation activities performed by the First Line of Defence for Vulnerability Assessment and Penetration Testing (VAPT) findings and Compromise Assessments.
Lead overall Vulnerability Assessments, Red Team Assessments, Compromise Assessments, and crowdsourced programmes.
Conduct threat intelligence activities, analyse and map Indicators of Compromise (IoCs), and prepare reports.
Manage phishing simulation exercises involving email, voice, and deepfake scenarios.
Oversee cyber incidents and serve as the alternate Cybersecurity Incident Manager.
Research and recommend the latest enhanced security controls applicable to the company.
Implement Cyber Resilience Maturity initiatives in collaboration with the IT Department to improve the maturity level.
Review Vulnerability Assessment reports and ensure that the First Line of Defence executes mitigation plans according to the established timeline.
Carry out tasks required by Bank Negara Malaysia (BNM) and PayNet, specifically for the Second Line of Defence within the CISO Office.
Job Requirements:
At least 7 years of relevant experience in Information Security or IT Risk Management, preferably in a managerial position within the financial services industry.
A graduate degree in Information Technology, Computer Science, or another relevant field.
Professional certification in Information Security, IT Risk, or IT Security is preferred.
Experience in Vulnerability Assessment and Penetration Testing (VAPT), Red Team exercises, and Threat Hunting.
Exposure to technical IT tasks, such as security administration, system administration, and network administration.