Full Time Executive, IT Network - Security Jobs, in Takaful IKHLAS Federal Territory - Maukerja

About Takaful Ikhlas

Takaful Ikhlas Berhad is renamed to Takaful Ikhlas Family Berhad (Takaful IKHLAS Family) and manages the family takaful business. Its general takaful business is being managed by a new entity, Takaful Ikhlas General Berhad (Takaful IKHLAS General).

Takaful IKHLAS offers a comprehensive range of family and general takaful products. Its distribution channels comprise of highly knowledgeable and well-trained agents, brokers, financial institutions, motor franchise holders and cooperatives. Takaful IKHLAS has 13 branch offices and currently records around 2 million registered certificate (policy) holders and more than 5,000 agents.

Both Takaful IKHLAS Family and Takaful IKHLAS General are wholly owned subsidiaries of MNRB Holdings Berhad.

JOB PURPOSE

The IT Security Executive is responsible for supporting the implementation, operation, monitoring, and maintenance of the Group's information security controls and cybersecurity initiatives to ensure the confidentiality, integrity, and availability of information assets.

The role assists in safeguarding the organization's IT infrastructure, applications, and data

against cyber threats through security monitoring, incident response, vulnerability management,

and compliance activities. The incumbent will work closely with internal ICT teams and external

service providers to ensure security controls are effective, compliant with regulatory requirements, and aligned with the Group's cybersecurity objectives

JOB RESPONSIBILITIES

1. Monitor and support the administration of the Group's security infrastructure, including firewalls, endpoint protection, email security, web security solutions, SIEM, and access management systems.
2. Monitor security alerts, events, and logs to identify potential threats, vulnerabilities, or suspicious activities.
3. Perform initial investigation, analysis, and escalation of cybersecurity incidents in accordance with established incident response procedures.
4. Support vulnerability assessments, security scans, and remediation activities across servers, endpoints, network devices, and applications.
5. Assist in the implementation and maintenance of security controls, policies, standards, and procedures.
6. Support user access reviews, privileged access management, and identity governance activities.
7. Participate in cybersecurity awareness and user education initiatives across the organization.
8. Assist in conducting security risk assessments and security reviews for systems, projects, and third-party services.
9. Coordinate with internal stakeholders and external vendors on security-related matters, incident investigations, and remediation activities.
10. Support compliance initiatives relating to information security, regulatory requirements, and internal governance standards.
11. Maintain documentation relating to security configurations, incidents, vulnerabilities, risk assessments, and operational procedures.
12. Assist in the review and maintenance of cybersecurity policies, standards, guidelines, and controls.
13. Support audits, regulatory reviews, and security assessments conducted by internal and external parties.
14. Participate in disaster recovery and business continuity exercises from an informationsecurity perspective.
15. Prepare periodic security reports, including incidents, vulnerabilities, compliance status,and security improvement initiatives.
16. Stay updated on emerging cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
17. Support after-office-hours activities and incident response activities when required

QUALIFICATION & EXPERIENCE

Academic

• Bachelor's Degree in Cybersecurity, Information Security, Information Technology, Computer Science, Computer Engineering, or a related fieldProfessional

The following certifications will be an added advantage:

• CompTIA Security+

• Certified Information Systems Security Professional (CISSP) Associate

• Certified Information Security Manager (CISM) Associate

• Microsoft Security, Compliance, and Identity Fundamentals (SC-900)

• Microsoft Security Operations Analyst (SC-200)

• Fortinet Certified Associate (FCA) Cybersecurity

• ISACA Cybersecurity Fundamentals Certificate

Experience

1. Minimum 3 years of working experience in information security, cybersecurity operations, security administration, IT infrastructure security, or related areas.
2. Experience in monitoring and managing security technologies such as firewalls, endpointsecurity, email security, SIEM, and access management solutions.
3. Basic hands-on experience in cybersecurity incident detection, response, andinvestigation.
4. Experience performing vulnerability assessments, security reviews, or remediationactivities.
5. Familiarity with cybersecurity frameworks, standards, and security best practices.
6. Experience working with vendors, managed security service providers (MSSPs), andexternal security partners.
7. Exposure to cloud security, regulatory compliance, or cybersecurity governance wouldbe an added advantage

TECHNICAL COMPETENCIES REQUIRED

• Good understanding of cybersecurity concepts, principles, and best practices.
• Basic knowledge of network security, endpoint security, identity and accessmanagement, and data protection controls.
• Familiarity with security monitoring tools, SIEM platforms, and log analysis.
• Understanding of common cyber threats, malware, phishing, ransomware, and attack methodologies
• Knowledge of vulnerability management and remediation processes.
• Understanding of security governance, risk management, and compliance requirements.
• Familiarity with cloud security concepts (Microsoft Azure, Microsoft 365, AWS, or equivalent) would be an added advantage.
• Strong analytical and problem-solving skills.
• Good written and verbal communication skills.
• Ability to work independently and collaboratively in a team environment.
• Good documentation and reporting skills.
• Customer-oriented mindset with strong service delivery focus.
• High level of integrity and awareness of information confidentiality