Cybersecurity Officer
Summary
A cybersecurity officer at a Malaysian financial services group who monitors security alerts and logs, supports incident response, coordinates vulnerability and penetration testing remediation, and maintains policies, audit evidence and management reports. Day-to-day work spans SIEM, endpoint protection, firewalls, PAM, DLP, MFA and access reviews on Windows/Linux and Microsoft 365 environments.
Monitor security alerts and logs from security platforms, investigate suspicious activities, document findings and escalate incidents promptly.
Support incident response, including initial assessment, containment coordination, evidence preservation, recovery tracking and post-incident reporting.
Coordinate vulnerability assessments and penetration tests; maintain a remediation tracker and follow up with system owners and vendors until findings are resolved and verified.
Review threat intelligence and vendor security advisories, assess their relevance to the Company’s environment and coordinate timely remediation with the infrastructure and application teams.
Support administration and monitoring of security tools, including endpoint protection, firewalls, SIEM, Privileged Access Management (PAM) and Data Loss Prevention (DLP), where deployed.
Assist with access reviews, privileged account controls and Multi-Factor Authentication (MFA) verification; follow up on inappropriate or excessive access with authorised system owners.
Validate dark web and credential exposure alerts, coordinate remediation with relevant business teams and track cases to closure.
Assist with security reviews of new systems, cloud services and technology changes, including configuration hardening and network segmentation controls.
Support third-party cybersecurity due diligence, review vendor security evidence and track agreed corrective actions.
Maintain cybersecurity policies, procedures, risk registers, incident records and audit evidence; support assessments relating to applicable SC and Bursa Malaysia requirements.
Coordinate security awareness training and phishing simulations, monitor completion and assist with targeted follow-up for staff requiring additional guidance.
Prepare cybersecurity status reports covering incidents, vulnerabilities, remediation progress, awareness activities and outstanding risks for management review.
Assist with cyber incident tabletop exercises and security-related business continuity and disaster recovery activities; coordinate with IT teams, business units and service providers.
Requirements:-
Degree in Cybersecurity, Information Security, Information Technology, Computer Science or a related discipline.
Preferably 1–3 years of relevant experience in cybersecurity operations, security monitoring, IT security or system/network administration with security responsibilities.
Working knowledge of Windows and Linux environments, Microsoft 365, networking fundamentals and common cyber threats.
Familiarity with security log analysis, incident handling, vulnerability management, endpoint protection, firewalls and access controls.
Understanding of information security policies, risk assessments, audit evidence and regulatory compliance; experience in financial services is an advantage.
Relevant certifications such as CompTIA Security+, Microsoft security certifications or equivalent are an advantage.
Strong analytical, documentation and communication skills, with the ability to work independently and coordinate across teams.
Ability to support urgent security incidents outside normal working hours when required, in accordance with Company arrangements.