Full Time Cyber Security Manager Jobs, in MindGraph Federal Territory - Maukerja

Open to local Malaysians and EP candidates only due to urgency of the project

Job Responsibilities:

• Lead the Cyber Threat and Vulnerability Management (CTVM) programme across infrastructure, applications, cloud environments and digital assets.
• Conduct and coordinate vulnerability assessments, security scans, penetration testing, configuration reviews and cloud security assessments.
• Identify, validate, prioritise and track vulnerabilities through remediation and closure, ensuring risks are addressed within agreed timelines.
• Maintain IT hardware and software asset inventories to support vulnerability identification and security risk management.
• Coordinate application security testing activities, including SAST, DAST, Software Composition Analysis (SCA) and secrets scanning, in collaboration with DevSecOps teams.
• Oversee security monitoring and detection activities involving SOC, EDR and MDR solutions, ensuring timely investigation, escalation and reporting.
• Coordinate cybersecurity incident response, including incident classification, investigation, root cause analysis, remediation and lessons learned.
• Provide technical security guidance on cyber hygiene, emerging threats, cloud security and AI-related security risks.
• Develop and maintain security policies, SOPs, KPIs, KRIs, risk dashboards and management reports.
• Coordinate with IT, application, infrastructure, cloud, compliance and business stakeholders to strengthen the organisation's security posture.
• Support cybersecurity governance, audits, regulatory compliance and continuous improvement initiatives.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 7–10 years of relevant experience specifically in Information Security or Cybersecurity, with strong exposure to vulnerability management and security monitoring.
• Professional certifications such as CISM, CRISC, CEH, OSCP or equivalent are preferred.
• Strong hands-on experience managing the end-to-end vulnerability management lifecycle, including scanning, assessment, risk prioritisation, remediation tracking, retesting and closure.
• Experience coordinating vulnerability assessments, penetration testing, security configuration reviews and cloud security assessments.
• Familiarity with security monitoring, SOC operations, EDR/MDR platforms and cybersecurity incident response.
• Experience with enterprise security tools such as Nessus, Tenable, Qualys, Burp Suite, CrowdStrike or equivalent platforms.
• Ability to interpret security findings, validate vulnerabilities, recommend remediation actions and track resolution.
• Understanding of application security testing, including SAST, DAST, SCA and secrets scanning.
• Knowledge of cybersecurity frameworks and standards such as CIS Controls, BNM Risk Management in Technology (RMiT), CSA Cloud Controls Matrix (CCM) and ISO 27001, or equivalent.
• Good understanding of cyber threats, attacker tactics, techniques and procedures (TTPs), and emerging cloud and AI security risks.
• Strong analytical, problem-solving, communication, stakeholder management and reporting skills.