全职 Information Technology Security Assistant Manager 工作, 薪水, Eco-shop Malaysia Selangor 公司招聘中 - Ricebowl

Job Summary:

Responsible for safeguarding the organization’s digital assets by implementing and maintaining security measures to protect against cyber threats. This role involves monitoring systems, responding to incidents, ensuring compliance, and promoting a culture of security awareness across the company.

Job Responsibilities:

• Develop and implement security policies and procedures aligned with ISO 27001, NIST, GDPR or industry specific regulations.
• Conduct regular security policy reviews and updates with cross functional teams
• Configure alerts for anomalous traffic and regular firewall rule audits to eliminate redundancies
• Monitor and manage firewalls, secure network access and identify network traffic for unusual activity
• Detect, investigate and respond to security incidents, ensuring timely containment and remediation.
• Perform regular vulnerabilities scans using tools and penetration testing.
• Prioritize and implement security patches to address known vulnerabilities.
• Enforce secure configuration across systems and baseline settings across all platforms and devices.
• Manage user access rights, including onboarding/offboarding procedures and enforce least privilege access.
• Prepare documentation and evidence for audits (internal or external). Track and resolve audit findings and compliance issues effectively.
• Work closely with Data Protection Officer and relevant parties
• Track and remediate audit findings or compliance gaps.
• Protect sensitive information using encryption techniques and DLP solutions
• Stay updated on emerging threats and recommend proactive defenses.
• Recommend and implement innovative solutions to strengthen the organization’s security posture.
• Contribution on any Security related project and assignment.

Qualifications:

• Diploma/Bachelor’s degree in IT Cybersecurity or certified in any recognize IT Security certificate.
• Minimum 3-5 years working experience in IT Security/ SOC
• Hands-on experience with SIEM, firewalls, EDR, MDR, XDR and penetration testing will be added advantage
• Familiar with Windows/ Linux OS, Networking, Firewall and any others security tools
• Knowledge of networking (TCP/IP, DNS, DHCP, firewalls, Zero Trust)
• Knowledge of endpoint protection tools
• Understanding of server virtualization
• Analytical mindset, communication and teamwork
• Knowledge with cloud security (AWS, Azure)