Candidates should possess leadership, team management, and stakeholder communication skills to guide security personnel and collaborate with clients.
Candidates should possess experience in incident investigation, risk assessment, and security auditing, ideally within industrial or logistics environments.
Candidates should possess the ability to work on-site in Bukit Mertajam, handle rotating or extended hours when necessary, and make sound decisions under pressure.
...
Perform structured threat modelling on systems and applications, identifying potential threats and attack vectors, and recommending proportionate mitigation controls aligned to the risk profile of the system
Conduct risk assessments to identify, evaluate, and priorities security risks, translating technical findings into clear business impact to support informed decision-making by project teams and senior stakeholders
Develop and maintain security design patterns covering key domains including cloud security, application security, identity and access management, data protection, and AI system deployments.
...
Build and maintain robust technical defences installing, configuring, and managing essential security infrastructure – including firewalls, endpoint protection (EDR), and strict identity access controls, while ensuring all new IT projects are designed securely from the ground up.
Assist and support the Manager, Infrastructure and Cybersecurity Risk to implement and to ensure compliance with all the policies relating to Information Technology.
Establish and maintain materials and equipment storage.
...
Perform structured threat modelling on systems and applications, identifying potential threats and attack vectors, and recommending proportionate mitigation controls aligned to the risk profile of the system
Conduct risk assessments to identify, evaluate, and priorities security risks, translating technical findings into clear business impact to support informed decision-making by project teams and senior stakeholders
Develop and maintain security design patterns covering key domains including cloud security, application security, identity and access management, data protection, and AI system deployments.
...