IT Security Executive
Posted 5
views
Summary
An IT Security Executive in Kuala Lumpur who handles daily security operations — monitoring alerts and incidents, tracking pentest remediation, audit and MAS regulatory items, and preparing security reports, dashboards, and IT Ops materials. Requires 2–3 years in IT Security/IT Ops/GRC; security certifications are a plus.
Job Responsibilities:
Daily Security Operations (DSO)
- Assist in the preparation of monthly and quarterly security performance reports.
- Monitor security alerts, logs, and incident notifications on a daily basis.
- Consolidate and maintain DSO data, including incidents, vulnerabilities, and advisories.
- Coordinate with infrastructure and application teams on security event responses.
- Track closure actions and ensure proper documentation for all DSO items.
- Prepare daily and weekly summaries for management and the BISO team.
Penetration Test (Pentest) Remediation Tracking
- Track penetration test findings from identification through closure.
- Follow up with system owners and technical teams to ensure timely remediation.
- Validate and collect evidence for closure of issues.
- Provide regular status updates to management and risk teams.
Audit & Regulatory Tracking (Including MAS Notices)
- Monitor and track all IT security audit items (internal, external, regulatory).
- Consolidate audit evidence and maintain documentation readiness.
- Maintain records of ongoing MAS advisory notices and coordinate with BISO and technical teams.
- Support tracking and reporting of remediation progress.
IT Operations Meeting Support
- Prepare and update IT Ops meeting materials, including metrics, dashboards, and status updates.
- Track follow-up items and ensure timely updates from technical teams.
- Assist in the preparation of monthly and quarterly security performance reports.
- Assist in producing monthly or quarterly security performance reports.
Job Requirements:
- 2~3 years of experience in IT Security, IT Operations, or GRC, with basic understanding of security alerts, vulnerabilities, and audits.
- Strong coordination and follow-up skills, able to work with infrastructure, application, audit, and risk teams.
- Good analytical and reporting abilities, including tracking remediation, preparing summaries, and maintaining documentation.
- Excellent communication skills with strong attention to detail and ability to manage multiple tasks.
- Diploma/Degree in IT or related field; security certifications (Security+, ISO27001, CEH) are a plus.