Ambition Hiring! Full Time Cybersecurity Lead (Infrastructure) in Federal Territory - Ricebowl

Cybersecurity Lead (Infrastructure) | Kuala Lumpur

About the client?
Our client is a well-established regional financial services group with operations across several Southeast Asian markets. As part of a push to strengthen its technology risk posture, it is hiring a senior leader to own infrastructure security in Malaysia. You will head a team of security specialists and set the standard for how risk is managed across in a closely regulated industry.

The Role
You will own the infrastructure security agenda end to end, from setting standards and running controls through to remediation and reporting to leadership. Key responsibilities include:

• Building and leading a capable team of security specialists, setting priorities and growing their technical depth
• Defining the operating model for security, including procedures, control frameworks and governance routines
• Running a risk-based vulnerability programme: assessing exposure, prioritising what matters, driving fixes and escalating where needed
• Holding technology owners accountable for patching performance, including timelines, exceptions and formal risk acceptance
• Keeping hardening standards and network access rules current, justified and consistently applied across all platforms
• Owning card data security compliance for the infrastructure layer, from control design to assessment readiness
• Tracking security findings and remediation commitments to closure, and raising material or overdue risks early
• Using automation to make controls, monitoring and reporting faster and more reliable
• Reporting on infrastructure risk posture, compliance status and performance metrics to senior management and governance committees

What We're Looking For
You'll bring:

• 10+ years in IT security, with a strong security background in banking, insurance or financial services
• A track record of leading and developing technical security teams
• Deep knowledge of vulnerability and patch management, secure configuration and security controls across on-premise and cloud
• Solid hands-on experience with RMiT, NIST, PCI DSS.
• The ability to translate technical risk into clear business decisions for senior stakeholders
• Certifications such as CISSP, CISM, CISA or CCSP (an advantage)
• A degree in Computer Science, Information Security or a related field

Ready to shape infrastructure security at a senior level? Apply now.
JTK Number: JTKSM 995 | Company Registration Number: *************88 (1048918-T)