Kerja Sepenuh Masa, Manager, Digital Security - Governance di Malaysia Rapid Transit Corporation (MRT Corp) Federal Territory - Maukerja

We are looking for an enthusiastic and driven Manager, Digital Security & Governance to join MRT Corp in Kuala Lumpur. In this role, you will be responsible for defining, implementing, and continuously improving enterprise-wide cybersecurity requirements and governance. This role is responsible for leading and enabling risk-informed decision making for the overall cybersecurity landscape by utilising a risk-led and threat-informed approach. It is expected that all definitions and communication of cybersecurity governance across the enterprise should include timely management reports on security posture and controls applied.

Your Role:

• Implementation of a cybersecurity framework in accordance with industry standards and best practices to ensure they are up to acceptable industry standards and reasonable assurance of security of the computing environment. This encompasses the entire enterprise ecosystem, which is made up of IT, OT, and IoT.
• Manage and direct cybersecurity operations, including internal and external stakeholders. Produce and give cybersecurity governance reports as necessary.
• Consistently monitoring and being aware of industry standard best practices, such as NIST, and conducting gap analysis on current governance are necessary.
• Maintain and enforce IT-related corporate policies and SOPs to ensure proper governance and compliance.
• Liaise with other departments such as risk management, quality management, administration, SHE and external parties such as external auditors, security solution providers and industry practitioners to carry out the relevant governance and security activities.
• Develop soft skills and technical competencies required for team members for them to perform current tasks for sustainable capabilities and continuous improvement.
• Manage periodic security activities such as awareness & training program and vulnerability management.
• Provide consultancy or advisory services to other business units pertaining to IT governance, policy, standards, SOPs and security considerations when required.
• Develop and maintain the DRP / BCP together with other relevant business units and coordinate the periodic testing in order to be prepared if actual recovery activities need to be carried out.
• To support the implementation of the ABMS and comply with the requirements of anti-bribery controls implemented by MRT Corp as well as to refrain from getting involved in any corrupt practices.

Requirements

• Previously held a role in cybersecurity with a proven track record in managing cyber risks and governance for IT, OT, and IoT infrastructure.
• Bachelor's degree in IT, ICT, MIS, Computer Engineering or related fields with a minimum of 8 years of related work experience.
• Having CISSP, CISA, or CISM certification is an added advantage, along with knowledge of relevant industry standards and frameworks such as NIST, CoBIT, ISO/IEC, 27k, and ITIL.
• Proficiency in various security tools, systems, and technologies.
• Experience in security operations and/or IT/OT/IoT infrastructure.
• Excellent communication skills in writing and speaking, that can be understood by audiences with or without technical backgrounds.
• Minimum CGPA 3.00 and above

Note: We offer a 2-year fixed term contract with competitive benefits and the option for renewal based on performance. Due to volume of applications, only shortlisted candidates will be contacted.