Junior Cybersecurity Analyst (1 Year Contract)

Who We Are

The Coca-Cola Company (TCCC) is the world's largest beverage company, refreshing consumers worldwide for over 135 years. Our unrivaled portfolio includes more than 500 sparkling and still brands and more than 3,800 beverage choices, with iconic brands such as Coca-Cola, Sprite, Minute Maid, Schweppes, FuzeTea, Monster, and Fanta.

With over 1,500 employees, Coca-Cola Beverages Singapore, Malaysia & Brunei is a complex and well-developed organization that produces, sells, and distributes the Coca-Cola Company products across the country. Our world-class manufacturing plant in Halal Park, Bandar Enstek in Negeri Sembilan serves as our Halal production hub for Malaysia, Singapore, and Brunei.

About The Role

Location: Menara Lien Ho, Petaling Jaya

Department: Digital Technology Services

Reports to: Head of Cybersecurity

What You'll Do

The Cybersecurity Analyst is responsible for supporting the organization's cybersecurity operations and initiatives to protect systems, networks, applications, and information assets from cybersecurity threats.

The role supports the identification, assessment, monitoring, and mitigation of cybersecurity risks and assists in implementing and maintaining appropriate security controls in line with organizational policies, business requirements, and recognized cybersecurity frameworks.

The Cybersecurity Analyst will also support security incident response, vulnerability and risk monitoring, cybersecurity reporting, compliance activities, and continuous improvement initiatives while working closely with IT, business stakeholders, vendors, and other relevant parties.

1. Monitor cybersecurity alerts, threats, vulnerabilities, and security incidents.
2. Support the investigation, response, remediation, and documentation of cybersecurity incidents.
3. Assist in identifying and assessing cybersecurity risks and tracking mitigation actions.
4. Support the implementation and monitoring of cybersecurity controls across systems and networks.
5. Assist in maintaining cybersecurity policies, standards, and procedures in line with frameworks such as ISO/IEC 27001 and NIST Cybersecurity Framework.
6. Support vulnerability assessments and follow up with relevant teams on remediation actions.
7. Prepare cybersecurity reports, risk indicators, incident updates, and other security-related documentation.
8. Work with IT, business stakeholders, and vendors to address cybersecurity risks and security requirements.
9. Support cybersecurity audits, compliance assessments, and related activities.

What You Bring

1. 1 - 2 years of relevant working experience in cybersecurity, information security, IT security, security operations, or related areas.
2. Experience in areas such as security monitoring, incident response, vulnerability management, cybersecurity risk assessment, or security compliance.
3. Exposure to cybersecurity frameworks such as ISO/IEC 27001 and/or NIST Cybersecurity Framework is preferred.
4. Experience with cybersecurity monitoring or security tools would be an advantage.
5. Experience working with IT teams, business stakeholders, and/or external vendors is preferred.
6. Relevant cybersecurity certification or professional training would be an added advantage.

Our Purpose & Growth Behavior

We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We focus on five key behaviors – curious, empowered, inclusive, agile, and corporate entrepreneurship – and value how we work as much as what we achieve.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state, or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.