IT Security Operation Manager

Summary :

The candidate is responsible for assessing information risk and facilitates remediation of identified vulnerabilities for IT & Cybersecurity risk across the enterprise. Management of IT security infrastructures, perform security vulnerability configuration management and work closely with Business Units (BU) to ensure Information Security policies are integrated with business processes. Candidate with experience in Cybersecurity Operations, Incident Management & Response and Project would be an advantage.

Responsibilities :

• Oversee overall operation of Security Operation Centre (SOC) and Security BAU activities. Manage Security Incident Management Team to ensure proper co-ordination in the event of security threat outbreak, initiate remediation activities and work closely with IT security team on Security investigation / forensic analysis. Resolve potential security attempt and vulnerability issues timely.
• To perform security risk assessment and technical reviews on projects that involves transfer of confidential data or third-party access to infrastructure. Regular meetings with Business Units / Clients / stakeholders to ensure all concerns or roadblock in business activities projects related Information Security are addressed.
• Proactively assess potential exposures of cyber threats and ensure adequate safeguards. Perform security vulnerability scan on network infrastructures to identify security weakness and work on the necessary remediation.
• Responsible for Cybersecurity incident response management and recovery process. Identifies and resolves potential security breaches and vulnerability issues in a timely and accurate method.
• Manage Information Security projects to comply with the Group and Regulatory requirements especially on work together with Risk Management and Compliance on the Bank Negara Malaysia (BNM) Risk Management in Technology (RMiT).
• Assess potential exposures to cyber threats arising from arrangements to ensure adequate safeguards and a defined process for reporting security incidents. Recommend improvements and upgrades to the security posture of the organization.
• Manage overall information security compliance including Threat Monitoring, Patch Management, Vulnerability Management, Antivirus Management, Hardening and identity management.
• Ensure risk control issues are updated in risk matrix & tracked. Ensure all audit findings are tracked, remediated & closed on timely manner. Coordinate with Security vendors / Group on management critical infrastructures : SOC, SIEM, WAF / firewall, proxy, etc. Conduct review on the configuration and rules settings for all security devices.
• Ensure that the Penetration Test being performed monthly and annually for systems. Perform annual user account recertification for all critical systems.
• Coordinate regular assessments of cloud infrastructure security posture and configurations to identify vulnerabilities and risks.
• Conduct IT Security Awareness Program and training to educate all employees.

Requirements :