Senior Manager, Cybersecurity Assurance
Summary
Leads second-line cybersecurity assurance within the CISO office of a Malaysian payments company: runs cyber drills, control assurance reviews, VAPT/red-team/compromise assessments, threat intelligence and phishing simulations, governs cyber incidents, and ensures BNM and PayNet requirements are met.
Salary: RM 13,000 – RM 18,000 per month
Job Responsibilities:
Conduct cyber drills to assess and improve cyber incident response and recovery capabilities, including cyber incident governance.
Conduct control assurance reviews to evaluate the effectiveness of controls and processes.
Validate remediation activities performed by the First Line of Defense (1LOD) following Vulnerability Assessment and Penetration Testing (VAPT) and Compromise Assessments.
Lead overall Vulnerability Assessments, including Red Team Assessments, Compromise Assessments, and Crowdsourced Programs.
Perform threat intelligence activities, including analyzing, mapping, and reporting Indicators of Compromise (IoCs).
Manage phishing simulation exercises covering email, voice, and deepfake scenarios.
Govern cyber incidents and serve as the alternate Cybersecurity Incident Manager.
Research and recommend the latest enhanced security controls applicable to the company.
Carry out Cyber Resilience Maturity roll-out initiatives in collaboration with ITD to improve the maturity level.
Review Vulnerability Assessment reports and ensure that the First Line of Defense executes mitigation plans according to the agreed timelines.
Perform tasks required by Bank Negara Malaysia (BNM) and PayNet, specifically those applicable to the Second Line of Defense within the CISO Office.
Job Requirements:
5–7 years of relevant experience in Information Security / IT Risk managerial position preferably in financial environment.
A graduate degree in Information Technology / Computer Science or other relevant major.
Preferably a professional certificate in Information Security / IT Risk / IT Security.
Experience in Vulnerabilities Assessment and Penetration Test, Read Team Exercise, Threat Hunting.
Exposure to IT technical e.g., security administrator, system and network administrator.