Kerja Sepenuh Masa, Head, Network Security Research di Malaysian Communications And Multimedia Commission Selangor - Maukerja

Job Summary

The Head of Network Security Research Department is responsible in leading and managing the development and implementation of innovative solutions for security and operational challenges; conduct research on emerging security threats and vulnerabilities; develop and maintain relationships with stakeholders; and drive initiatives to enhance the security, resiliency, and reliability of network infrastructure and services, including critical network information infrastructure.

Job Responsibilities

1. Implement innovative solutions and initiatives to enhance the security, resiliency, and reliability of network infrastructure and services, including critical network information infrastructure.
2. Plan and manage the development security tools, artificial intelligence systems, and benchmark emerging security technologies to strengthen the overall security posture of organizations and stakeholders.
3. Drive process automation initiatives to enhance operations and service delivery within the division, sector, organization, and among external stakeholders.
4. Study, identify, and evaluate emerging security threats and risks, and develop effective mitigation strategies, tools, and systems to manage those threats and risks.
5. Implement vulnerability assessment and penetrations tests on communications & digital products, services, systems, and organizations to identify security vulnerabilities, and pursue corrective action to address them.
6. Undertake threat-intelligence gathering and horizon–scanning activities to increase situational awareness and preparedness against arising security threats and risks.
7. Undertake strategic and tactical R&D activities exploring new technologies and techniques towards enhancing MCMC and industry’s capabilities, while reducing over-dependency on vendor-supplied solutions in network/cyber security.
8. Establish research partnership with the academia in the enhancement of capabilities, processes, tools, and systems.
9. Collaborate with technical agencies, law enforcement agencies, service providers, vendors, and other relevant parties on the mitigation of cyber-dependent crimes, cyber-enabled crimes, and the misuse of telecommunications services.
10. Forecast and identify capacity and expertise gaps within the department, and to enhance the necessary skillsets through comprehensive training and capacity building.
11. Plan, monitor, and control the financial budget and costs to ensure effective and efficient utilization and management of funds.
12. Provide coaching, guidance, and mentoring to all staff within the department to motivate staff to fulfil their self-actualization.

Qualification & Work Experience

1. Degree in Computer Science, Information Technology, or related field.
2. Minimum 10 years of working experience in software development (frontend and backend) with solid understanding security management, and with relevant professional certification in network, information and/or cybersecurity.

Technical Competencies/Skills

1. DevSecOps principles.
2. Security Posture Assessment (SPA).
3. CIS principles.
4. Ethical hacking.
5. Threat intelligence and management.
6. Incident handling and management.
7. Vulnerability Assessment and Penetration Testing (VAPT)
8. Information Security.
9. Project Management.
10. Strategic Communications.
11. Business Process Management.

Behavioural Competencies

1. Creative and innovative.
2. Problem solving skills.
3. Analytical thinking.
4. Stakeholder management.
5. Teamwork and collaborations.
6. Communications and Presentation Skills (BM & English).
7. Writing skills (BM & English).