Executive, Cybersecurity & Risk (ICT)

Location: Pasir Gudang, Johor

Work Employment: Fixed-Term Contract (12months)

JOB PURPOSE

The Executive for Cybersecurity & Risk exists to protect the organization's IT assets, data, and digital platforms from security threats and vulnerabilities. This role governs cybersecurity policies, conducts IT risk assessments, drives security awareness, and oversees cybersecurity posture across all platforms. It coordinates incident response, manages Security Operations Centre (SOC) and Managed Detection & Response (MDR) providers, and ensures compliance with cybersecurity regulations. The position exists to embed a proactive security culture and resilience framework across the IT function, while managing risk governance and post-incident reviews.

JOB RESPONSIBILITIES

• Define, maintain, and govern IT cybersecurity policies, standards, and controls in alignment with regulatory and industry requirements.
• Perform IT risk assessments, maintain the IT risk register, and implement risk mitigation initiatives across all IT domains.
• Plan & execute security awareness programs and risk mitigation initiatives across IT and the broader organization.
• Monitor cybersecurity posture across Infrastructure, Applications, Integrations, and Digital platforms on an ongoing basis.
• Monitor security alerts, coordinate incident response activities, and liaise with Security Operations Centre (SOC) and Managed Detection & Response (MDR) providers.
• Implement and maintain advanced IT security systems and processes including threat monitoring, incident response, and data integrity safeguards.
• Check compliance with cybersecurity regulations, standards, and best practices (ISO 27001, NIST, PDPA, etc.).
• Coordinate cybersecurity audits, assessments, and penetration tests; track and manage remediation of identified vulnerabilities.

REQUIREMENTS

• Degree in Information Technology, Computer Science, Cybersecurity, or equivalent/related discipline.
• Minimum 3-5 years experience in IT security, cybersecurity operations, IT risks, IT & Cybersecurity audit, or compliance role.