Search by job, company or skills

gentari

Head, Cyber Security

Save
new job description bg glownew job description bg glow
  • Posted 2 days ago
  • Be among the first 10 applicants
Early Applicant

Job Description

Changing how we live today

to help secure our future.

Join us at Gentari to be part of this exciting, purposeful journey towards a cleaner energy future.

Gentarians are passionate about sustainability - our purpose is to solve the world's most pressing sustainable energy needs. Here at Gentari, we move differently. Teams seek out opportunities to work with one another to achieve shared goals and we trust our people with the freedom and autonomy in ways of working to spur innovative thinking and creativity. We aim to keep good people at the heart of what we do by ensuring that our people feel empowered to chart career paths alongside personal growth. Beyond the promise of an open and flexible work environment, we hope to make Gentari feel like a second home, a place where everyone is valued, and differences are celebrated.

The Head, Cyber Security will serve as the primary focal point for all cyber security matters across Gentari's global operations — shaping strategy, managing execution, and coordinating with internal teams, business units, and external partners to ensure resilient, secure, and trusted operations.

Responsibilities:

Cyber Security Strategy, Governance & Risk

  • Lead the development and continuous enhancement of Gentari's cyber security strategy, governance framework, and risk management approach;
  • Define cyber security priorities, risk indicators, and performance metrics aligned to business objectives and regulatory requirements.;
  • Monitor the external threat landscape, emerging technologies, and evolving regulations to strengthen enterprise resilience;
  • Promote a strong cyber security culture by driving awareness, accountability, and risk ownership across the organization.

Enterprise Security Operations & Resilience

  • Lead enterprise cyber security programmes across IT and OT environments to strengthen prevention, detection, response, and recovery capabilities;
  • Oversee incident response readiness and coordinate cross-functional actions during significant cyber security events, investigations, or audits;
  • Partner with internal and external stakeholders to deliver security initiatives that enhance operational resilience and business continuity.

Infrastructure, Network & Application Security

  • Provide strategic oversight for infrastructure, network, endpoint, identity, and application security across Gentari's operations and regional offices;
  • Guide secure architecture and integration for enterprise platforms, third-party solutions, and operational technology environments;
  • Ensure cyber controls are embedded into new projects, site set-ups, and technology implementations from the outset.

Compliance, Audit & Regulatory Alignment

  • Oversee cyber security assessments, control reviews, and remediation programmes across the organization;
  • Ensure policies, standards, and controls align with relevant enterprise requirements and recognised frameworks such as ISO 27001, NIST, and applicable privacy regulations;
  • Lead engagement with internal and external auditors, regulators, and key stakeholders on cyber risk, compliance, and governance matters.

Stakeholder, Vendor & Regional Leadership

  • Build strong partnerships with business leaders, technology teams, and external service providers to deliver secure and effective operations across multiple geographies;
  • Oversee vendor and partner performance to ensure service quality, security compliance, and delivery against business needs;
  • Provide leadership on secure technology enablement for regional offices and growth initiatives, balancing operational needs with enterprise security expectations.

Requirements:

  • Bachelor's degree in Computer Science, Information Security, Engineering, or a related discipline;
  • Minimum 10 years of progressive experience in cyber security, including leadership responsibility across enterprise environments; exposure to both IT and OT security is an advantage;
  • Strong expertise in cyber governance, security operations, infrastructure and network security, identity and access management, incident response, and compliance frameworks;
  • Strong understanding of current and emerging cyber security technologies, trends, and threats, with the ability to translate them into practical business outcomes;
  • Proven ability to lead cross-functional teams, influence senior stakeholders, and deliver complex security initiatives across multiple geographies;
  • Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer are preferred.

For talent pipelining purpose, due to the heavy traffic of CVs, only qualified candidates will be notified.

By applying, you agree that we may collect and process your personal information for employment purposes. Please review our privacy notice for details on how we handle your data. Click here for Gentari Privacy Notice.

Putting Clean Energy Into Action

More Info

Job Type:
Industry:
Employment Type:

About Company

Job ID: 148463221

Similar Jobs

Malaysia, Kuala Lumpur

Skills:

Regulatory FrameworksGovernance CompliancePeople LeadershipStrategic LeadershipChannel ManagementClient EngagementBusiness Developmentinvestment productsCapital MarketsDistribution DynamicsRisk Management

Malaysia, Kuala Lumpur

Skills:

SdlcConfluenceJIRAAgile MethodologiesSDM5 project delivery methodologyNetwork Security solutionsEndpoint Security solutionsMS ProjectCloud Security solutionsActive Directory Identity Management solutions

Malaysia, Kuala Lumpur

Skills:

Incident ResponsePredictive AnalyticsCybersecurityreal-time monitoringIoT ecosystemsintegrating legacy and modern systemsdata platformssmart infrastructure

Malaysia, Kuala Lumpur

Skills:

Iso 27001SocVaptMSSPIT cybersecurity salesbusiness developmentcompliance-driven security solutions

Malaysia, Kuala Lumpur

Skills:

Control FrameworksRegulatory ComplianceMonitoring and ReportingRisk ManagementRisk AssessmentOperational RiskData TechnologyCompliance