Specialist, IT Cybersecurity

Salary: RM 6,500 – RM 8,500 per month

About the role

The Specialist, IT CyberSecurity is the Group's senior technical expert for information and cyber security, supporting the protection of the Group's IT and operational technology environments across all sites. Reporting to the Group IDT Director, the role provides the technical expertise behind the Group's security operations capability — threat monitoring, incident response, vulnerability management, endpoint and network security, and identity and access controls — and the governance framework that sits above it, covering security policy, standards, risk assessment, audit response, and regulatory compliance. The role combines hands-on technical delivery with policy development: it designs and operates security controls directly, and drafts the standards that, once approved by the Group IDT Director, site IT teams, application owners, and third-party providers are required to follow. It is an individual-contributor role without technical authority: its influence is exercised through the development of Group security strategy and operating plans, with ownership of those strategies and of the Group's security operations capability remaining with the Group IDT Director.

Key responsibilities

• Develop and maintain, for the Group IDT Director's approval, the Group information security policy set, standards, and procedures, and keep them aligned to recognised frameworks such as ISO 27001 and the NIST Cybersecurity Framework.

• Conduct cyber risk assessments across Group and site systems, maintain the security risk register, and track remediation of identified risks to closure.

• Recommend security requirements and standards for the Group IDT Director's endorsement, which site IT teams, application owners, and project teams are then required to apply, and support them in meeting these consistently.

• Report the Group's security posture, incident trends, risk exposure, and improvement progress to the Group IDT Director and senior management.

• Manage security tooling and managed-security-service vendors at the operational level, including service quality, licence utilisation, and cost.

• Operate and continuously improve Group security monitoring, covering SIEM use cases, log sources, detection rules, and alert triage across endpoints, servers, network, and cloud services.

• Lead investigation and response for security incidents end to end, including containment, eradication, recovery, root-cause analysis, and post-incident reporting.

• Maintain and test the cyber incident response plan and playbooks, and coordinate escalation with site IT teams, business stakeholders, external responders, and authorities where required.

• Run the Group vulnerability management cycle — scanning, prioritization by risk and exploitability, remediation tracking, and verification — across servers, endpoints, network devices, and applications.

• Develop and maintain identity and access management standards, including least-privilege, privileged-access controls, multi-factor authentication, and periodic access reviews and recertification.

About you

• Minimum 6 years of experience in IT, of which at least 3 years in a dedicated information security or cyber security role covering both operational security and governance.

• Hands-on experience operating security monitoring and detection tooling (e.g. Microsoft Sentinel, Defender XDR, Splunk, or equivalent SIEM/EDR platforms), including alert triage and detection tuning.

• Demonstrable experience leading security incident investigation and response end to end, including containment, root-cause analysis, and reporting to management.

• Experience running a vulnerability management programme, including scanning tooling, risk-based prioritisation, patching standards, and remediation tracking across a distributed estate.

• Experience implementing and operating identity and access management controls, including privileged access, multi-factor authentication, and access reviews.

• Practical experience applying recognised security frameworks and standards (e.g. ISO 27001, NIST CSF, CIS Controls) and drafting security policy and standards.

• Experience supporting internal and external audits, customer security assessments, or certification exercises, including evidence preparation and corrective action.

• Experience securing cloud environments (Azure, AWS) and hybrid infrastructure, including network security, firewalls, and secure configuration baselines.

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related discipline.

• Professional security certification is strongly preferred, e.g. CISSP, CISM, or CISA.