Manager, Cybersecurity Engineering & Operations

About Us

SD Guthrie Berhad (SD Guthrie) is one of the world's leading producers of Certified Sustainable Palm Oil (CSPO), representing approximately 12% of the global market share (as of 31 December 2022). With over 84,000 employees across 12 countries, we pride ourselves on innovation, sustainability, and excellence. Our operations span the entire palm oil value chain, and we are expanding into new business verticals such as green industrial parks and renewable energy. We offer enriching career opportunities supported by cutting-edge technology and a commitment to sustainability. We are the world's first palm oil company to have our net-zero GHG emissions reduction targets approved by the Science Based Targets initiative (SBTi).

Join us today, as we continue to Unlock Nature's Superpowers.

Your Mission

To lead the design, implementation, and operation of the organization's cybersecurity architecture, engineering, and security operations capabilities, ensuring effective protection of IT, OT, and cloud environments.

The role drives the delivery of secure and resilient technology solutions, oversees threat detection and incident response functions, and ensures cybersecurity initiatives are aligned with business objectives, risk management requirements, and regulatory expectations.

Job Description:

Cybersecurity Architecture & Strategy

• Define and maintain enterprise cybersecurity architecture across IT, OT, and cloud environments.
• Establish security design standards, principles, and reference architectures.
• Act as the technical authority for security architecture designs, control implementations & cybersecurity technology selection
• Ensure all systems and initiatives are secure-by-design and aligned with business and risk requirements.
• Lead cybersecurity transformation initiatives from strategy through delivery.

Security Engineering & Technology Management

• Own the full lifecycle of cybersecurity technologies starting from technology evaluation, procurement, deployment, optimization, and retirement.
• Manage key security platforms including:
• SIEM / SOC
• Endpoint Security (AV, EDR, XDR)
• PAM (implementation and operations)
• DLP and data security
• Network and cloud security solutions
• Zero Trust and secure access technologies
• Ensure solutions are scalable, integrated, and optimized for operational effectiveness.
• Define engineering standards, implementation patterns, and system integrations.

Application & Cloud Security

• Integrate security into SDLC and DevSecOps practices.
• Oversee application security testing (SAST, DAST, penetration testing).
• Manage cloud security posture, including identity, access control, encryption, and configuration management.

Security Operations & Incident Response

• Lead and manage Security Operations Center (SOC), whether internal or MSSP-based.
• Oversee threat monitoring and detection, incident response and containment and cyber investigation and root cause analysis
• Establish and maintain incident response plans, playbooks, and escalation procedures.
• Ensure timely remediation and recovery to minimize business impact.

Cyber Analytics & Investigation Execution

• Operate and optimize SIEM, threat intelligence, and security analytics platforms.
• Conduct detailed cyber investigations in accordance with forensic and evidentiary requirements.
• Produce incident reports, lessons learned, and corrective improvement actions.

Delivery & Vendor Management

• Deliver cybersecurity initiatives and projects within scope, timeline, and budget.
• Manage MSSPs and security vendors from an operational and service delivery perspective.
• Monitor SLA/KPI performance and ensure service effectiveness and value realization.

Strategic Planning & Continuous Improvement

• Define and maintain the cybersecurity technology roadmap aligned with business strategy.
• Monitor emerging threats, vulnerabilities, and technology trends.
• Drive continuous improvement in detection and response capabilities, automation and operational efficiency and cyber resilience and maturity
• Support long-term planning, investment prioritization, and capability development.

Education / Professional Qualification

• Bachelor's or master's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Cybersecurity certifications CISM, CRISC, CISSP, CCSK.

Professional Experience

• Minimum 10–12 years of experience in cybersecurity, including leadership, governance, and project delivery roles.
• Knowledge of cybersecurity frameworks, standards, and regulatory requirements relevant to Malaysia (PDPA, Bank Negara, ISO 27001) and the plantation/industrial sector.
• Proven experience in executive-level risk assessment, governance, and successful project delivery.
• Strong coordination, stakeholder management, and decision-making skills.
• Excellent analytical, problem-solving, and strategic thinking abilities.

Why Join Us

• Flexible Benefits Coverage
• Hybrid Workplace
• Learning on Demand
• Employee Wellness Programme
• Employee Engagement Activities
• Fully Subsidised Sports Clubs
• Education Assistance (terms & conditions apply)
• Free Parking
• Free Shuttle Service from nearest LRT
• and many more...

Only shortlisted candidates will be notified.

Discover more opportunities with us here!