Cybersecurity Officer

• Monitor security alerts and logs from security platforms, investigate suspicious activities, document findings and escalate incidents promptly.
• Support incident response, including initial assessment, containment coordination, evidence preservation, recovery tracking and post-incident reporting.
• Coordinate vulnerability assessments and penetration tests; maintain a remediation tracker and follow up with system owners and vendors until findings are resolved and verified.
• Review threat intelligence and vendor security advisories, assess their relevance to the Company’s environment and coordinate timely remediation with the infrastructure and application teams.
• Support administration and monitoring of security tools, including endpoint protection, firewalls, SIEM, Privileged Access Management (PAM) and Data Loss Prevention (DLP), where deployed.
• Assist with access reviews, privileged account controls and Multi-Factor Authentication (MFA) verification; follow up on inappropriate or excessive access with authorised system owners.
• Validate dark web and credential exposure alerts, coordinate remediation with relevant business teams and track cases to closure.
• Assist with security reviews of new systems, cloud services and technology changes, including configuration hardening and network segmentation controls.
• Support third-party cybersecurity due diligence, review vendor security evidence and track agreed corrective actions.
• Maintain cybersecurity policies, procedures, risk registers, incident records and audit evidence; support assessments relating to applicable SC and Bursa Malaysia requirements.
• Coordinate security awareness training and phishing simulations, monitor completion and assist with targeted follow-up for staff requiring additional guidance.
• Prepare cybersecurity status reports covering incidents, vulnerabilities, remediation progress, awareness activities and outstanding risks for management review.
• Assist with cyber incident tabletop exercises and security-related business continuity and disaster recovery activities; coordinate with IT teams, business units and service providers.

Requirements:-

• Degree in Cybersecurity, Information Security, Information Technology, Computer Science or a related discipline.
• Preferably 1–3 years of relevant experience in cybersecurity operations, security monitoring, IT security or system/network administration with security responsibilities.
• Working knowledge of Windows and Linux environments, Microsoft 365, networking fundamentals and common cyber threats.
• Familiarity with security log analysis, incident handling, vulnerability management, endpoint protection, firewalls and access controls.
• Understanding of information security policies, risk assessments, audit evidence and regulatory compliance; experience in financial services is an advantage.
• Relevant certifications such as CompTIA Security+, Microsoft security certifications or equivalent are an advantage.
• Strong analytical, documentation and communication skills, with the ability to work independently and coordinate across teams.
• Ability to support urgent security incidents outside normal working hours when required, in accordance with Company arrangements.