Manager, Cybersecurity and Risk

SALARY RANGE: RM 8,000 - RM 14,000

Key Responsibilities

• Lead and manage cybersecurity, information security, risk, and compliance functions.
• Develop and implement cybersecurity strategy, governance frameworks, and long-term security roadmaps.
• Oversee security operations, including SIEM monitoring, EDR, DLP, firewalls, vulnerability management, and incident response.
• Lead enterprise-wide IT risk assessments and maintain corporate risk registers.
• Serve as Incident Response Lead during cybersecurity incidents and major security breaches.
• Develop, implement, and review cybersecurity policies, standards, procedures, and governance controls.
• Manage compliance with frameworks and standards such as ISO 27001, NIST, COBIT, and PDPA.
• Prepare board-level reports, security metrics, risk assessments, and management updates.
• Manage cybersecurity budgets, vendors, service providers, contracts, and team performance.
• Promote a security-conscious culture through awareness and risk management initiatives.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related discipline.
• Minimum 5 years of relevant cybersecurity, GRC, or information security experience, including at least 2 years in a leadership or management role.
• Strong knowledge of ISO 27001, NIST, COBIT, cybersecurity governance, risk management, and compliance frameworks.
• Hands-on experience with SIEM, EDR, DLP, firewalls, vulnerability management, and incident response.
• Professional certifications such as CISSP, CISM, CISA, CRISC, CEH, Security+, PMP, PRINCE2, or equivalent are highly desirable.
• Strong leadership, vendor management, strategic planning, and stakeholder engagement skills.
• Experience in higher education environments will be an advantage.