IT Security Assistant Manager / Manager
Job Responsibilities
Support the implementation and maintenance of information security controls and requirements across technology projects from initiation through to the production deployment and transition into Business-As-Usual (BAU) operations.
Participate in project discussions, solution reviews, and implementation activities to ensure security requirements are adequately addressed and aligned with organizational policies, regulatory requirements, and industry best practices.
Perform security reviews and assessments on new systems, applications, infrastructure, cloud services, and technology initiatives.
Coordinate and follow up on remediation activities for identified security vulnerabilities, weaknesses, incidents, and audit findings within project timelines.
Assist in managing and maintaining security technologies, including but not limited to Identity and Access Management (IAM), Privileged Access Management (PAM), Endpoint Protection/Antivirus (AV), Data Loss Prevention (DLP), Key Management Systems, Cloud Security Controls, and other related security solutions.
Support security testing activities, including vulnerability assessments, security reviews, and penetration testing engagements for project deliverables.
Ensure security documentation, standards, procedures, and compliance records are maintained, reviewed, and updated regularly.
Assist in security governance, risk, and compliance activities to ensure adherence to regulatory and internal security requirements.
Work closely with project teams, infrastructure teams, application owners, vendors, and other stakeholders to facilitate the successful implementation of security controls.
Assist in security incident response, investigation, and reporting activities when required.
Perform any other duties and responsibilities assigned by the immediate superior from time to time.
Job Requirements
Bachelor’s Degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related discipline.
Minimum 3 years of working experience in Information Security, Cybersecurity, IT Risk, IT Compliance, or a related field.
Experience supporting technology projects, system implementations, cloud migrations, or infrastructure deployments from a security perspective will be an added advantage.
Knowledge of security and regulatory frameworks such as PCI DSS, Bank Negara Malaysia’s Risk Management in Technology (RMiT), ISO/IEC 27001, NIST Cybersecurity Framework, or equivalent standards.
Hands-on experience with security technologies such as IAM, PAM, DLP, Endpoint Security/Antivirus, SIEM, Vulnerability Management, Key Management, and Cloud Security solutions.
Knowledge of cloud platforms and security controls, particularly Amazon Web Services (AWS), is preferred.
Familiarity with security incident handling, investigation, vulnerability management, and risk assessment processes.
Strong analytical, problem-solving, communication, and stakeholder management skills.
Able to work independently while collaborating effectively with cross-functional teams.
Good command of both written and spoken English and Bahasa Malaysia.
Working location: Bandar Sunway, Selangor.
Pay range and compensation package: Salary and compensation details will be discussed during the interview process.
Equal Opportunity Statement: NTT Data Payment Services is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.