-Monitor and maintain the internet, email and web security for entire organization. Track, monitor, analyze and resolve any vulnerability or security issue.-Monitor on new CVE and ensure affected systems are being patched accordingly.-Respond and resolve any vulnerability or security incident that may arise.-Act as the point of contact on any security incidents to respond, isolate, remediate, or resolve the incident quickly.-Ensure periodic testing of the organization's network and systems to determine security violations and inefficiencies.-Stay up-to-date on the latest cyber threats and to adapt CIS Benchmarks to proactively safeguard any new emerging security risks.-Develop, implement and maintain the IT and Cyber security frameworks, procedures and policies.-Develop, implement and review the incident response plan to effectively respond to cyberattacks and data breaches. This includes data recovery, containment, eradication, and reporting.-Safeguard all network elements including but not limited to computer networks, local area networks (LANs), wide area networks (WANs), internet connections, intranet, VPNs, VLANs, VoIP and other data communication systems.-Create user awareness with continuous education on Cybersecurity and best practices for safeguarding the IT assets and digital data.-Develop and manage the IT security budget to ensure adequate resources are available for security initiatives. [Apply now at https://my.hiredly.com/jobs/jobs-malaysia-hiredly-x-job-it-security-cyber-risk-manager]
Key Skill Requirements:-Proficiency in conducting regular vulnerability assessments of the systems to prevent any security incident.-Awareness of the latest methods used by hackers and malicious elements to break into systems.-Competency to use the available tools to discover any dubious movement in the network and system.-Soft skills including effective verbal communication and advanced written with all levels in the company.-Knowledge of cyber laws and compliance requirements as per the law of the land.-Ability to conduct an in-depth analysis of computer networks and identify any vulnerabilities in the system. Attention to detail is a fundamental personality trait for this position and able to meet deadlines with minimal supervision.Qualification and Experiences requirement:-Bachelor's degree in Information Technology (IT), Information Security (IS) or equivalent education with work related experience.-Minimum 5-8 years of prior relevant experience in IT security and/or cyber risk management.-Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.-Hands-on experience analyzing high volumes of logs, network data (e.g., Full-Packet Capture FPC), and other attack artifacts in support of incident investigations.-Experience with vulnerability scanning and monitoring tools and technologies.-Experience on Office365 and other Cloud Security (e.g., GCP, AWS, Azure).-Understanding of mobile technology and OS (e.g., Android, Huawei, iOS, Windows), VMware technology is a plus.-Excellent analytical and problem-solving skills.-Strong communication and interpersonal skills with the ability to effectively convey complex technical information to non-technical stakeholders.
