Full Time Head of Professional Risk Services (PRS) Jobs, in SYSARMY SDN BHD Federal Territory - Maukerja

Requirements

• Degree in Computer Science, IT or a related field.
• Minimum 5 years of experience in IT Security, Information Security or Cybersecurity.
• Minimum 3 years of experience in a Security or Network Operations Centre (SOC/NOC), with knowledge of SIEM tools.
• Experience in cybersecurity assessments, risk services projects and implementation.
• Knowledge of ISO 27001, NIST, PCI-DSS, RMiT, MAS requirements and data privacy.
• Professional certifications in ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, CRISC, CISSP, CISM, CISA or equivalent.
• Strong leadership, project management, analytical and problem-solving skills.
• Excellent communication skills in English and Bahasa Malaysia.
• Experience in vendor management and handling high-pressure situations.
• Detail-oriented, proactive and able to work collaboratively.

PRIMARY RESPONSIBILITIES

To lead and manage PRS team

Responsible for PRS team’s day to day operation including hiring, training and assessing staff

Resource management for PRS includes but is not limited to the following: -

• Planning and Assignment of headcount for new PRS projects
• Planning of headcount for new and existing PRS projects at planned intervals.
• Resolve issues encountered by the PRS team members and escalate to Management if

required.

• Maintain team spirit and motivate team morale.

Pre-sales and post-sales activities on PRS include but are not limited to supporting solution

implementation, servicing and provide advisory to customers.

Subject matter expert for PRS clients

Develop, maintain, and update processes to strengthen the current PRS include but are not

limited to operations manuals, policies, standards, guidelines, procedures, and reporting

To work closely with other teams for PRS projects and operations

Creation of periodic reports for PRS to the Management

To ensure proper client management and reporting for PRS clients.

Part of security analysis to monitor and investigate the incident event.

To comply with the Information Security Policy in the organization.