Total 32,044 information security analyst job vacancies in Malaysia

• Professional Development + Travel Opportunities
• Excellent Compensation Package

About Our Client

Our client is an MNC, looking to hire an Information Security GRC Specialist to their team. This is an individual contributor and requires travel.

Job Description

As the Information Security GRC Specialist, your responsibilities include:

• Implementing and upholding the IT Technology Governance framework, policies, and procedures, taking into account relevant regulations and internal guidelines
• Developing the organization's cyber risk strategy and posture, encompassing data risk, cyber risk management, frameworks and policies, as well as measures, methods, and reporting
• Devising and enacting strategies for information security along with corresponding IT security policies throughout the organization
• Continuous assessment of IT security protocols and measures to boost the company's security position.

The Successful Applicant

As a successful candidate, you will have the following:

• Bachelor's Degree in Computer Science or a relevant field
• At least 5 years of experience in IT Risk, Compliance, Audit and/or InfoSec
• Excellent communication skills, with the ability to effectively present, liaise with stakeholders
• Comprehensive understanding of ISO 27001, NIST etc

What's on Offer

• Reputable and Stable Firm
• Excellent MNC culture

Contact

Isha Hussain (Lic No: R2197976/ EA no:18S9099)

Quote job ref

JN-042024-6405514

Phone number

+65 6416 9850

Michael Page International Pte Ltd | Registration No. 199804751N

The Game Changers:
At AP+ we're changing the game! We're doing big things, and we can't do it alone. We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful. We value the unique talents, perspectives, of all our employees. This includes people of all gender identities and sexual orientations, First Nations Peoples, people of all abilities and diverse backgrounds, as well as their families. AP+ brings together Australia’s three domestic payment providers, BPAY Group, eftpos and NPP Australia, into one integrated entity. Bringing these businesses together enables AP+ to create a more competitive and coordinated Australian payments organisation that is strategically placed to respond to the impacts of regulatory and technological change today, and into the future.

The Purpose:

At Australian Payments Plus (AP+), we're on a mission to revolutionise the payments industry and ensure the security of payments infrastructure across Australia. As the Chief Information Security Officer (CISO), you will play a critical role in safeguarding AP+ systems and data from cyber threats.

As the CISO, you will provide strategic and operational leadership for AP+'s information security program. You will develop and implement comprehensive security initiatives, policies, and procedures to protect our systems, networks, and data. You will be responsible for identifying and mitigating risks, managing security incidents, and ensuring compliance with relevant regulations and standards.

In addition, you will drive a culture of security awareness and promote best practices across the organisation. You will collaborate with cross-functional teams to integrate security into the development lifecycle and provide guidance on secure coding practices. You will also stay up to date with the latest industry trends and emerging threats to continuously enhance AP+'s security posture.

As the CISO your key responsibilities will be:

• Cyber Security Management
• Identity & Access Management
• Risk Management
• Security Architecture
• Testing, Compliance & Certifications
• Partner & Vendor Management
• People Leadership

In order to be considered for the CISO role you will need to demonstrate:

• Tertiary qualifications in Computer Science, Information Technology, or a related discipline.  And/or equivalent relevant knowledge and experience. 
• Professional security management certification such as CISM, CISSP or equivalent.
• Robust and proven experience leading and growing security functions in innovative, leading edge and fast paced environments.
• 10+ years’ experience in risk management and information security in a technical environment
• Experience leading, directing and developing technical staff in the execution of security program and project initiatives.
• Experience with contract and vendor negotiations and management including managed services.
• Experience with Cloud computing.
• Experience creating, testing and maintaining business continuity management and disaster recovery plans.
• Effective interpretation of security-related data allows CISOs to detect potential security threats.
• In-depth technical knowledge of cybersecurity tools and concepts, such as intrusion detection systems, firewalls, risk identifying tools and SIEM systems
• Strong understanding of information security, risk, privacy, and regulatory compliance
• Extensive knowledge of risk management techniques.
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.
• Familiarity with relevant regulations and standards (e.g., PCI-DSS, ISO 27001).

What’s Next:
We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.
We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to recruitment@auspayplus.com.au We also encourage you to let us know your pronouns at any point during the recruitment process.

AP+ are not partnering with Recruitment agencies for this role.

Your background

• Previous information technology/security audit/assessment experience preferred.
• Ability to leverage attention to detail and analytical skills.
• Ability to multi-task and work both independently as well as part of an assessment team
• Ability to plan, execute and document assessment and remediation activities following established processes and procedures.
• Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
• Minimally, CISSP and/or CISA certifications are required as well as five to eight years of experience in information security or business continuity.
• Technical skills include the domains of information security and business continuity including:
• Information Security Controls (Cloud Security, Infrastructure Security, Access Management, Physical Security, Application Security, etc.),
• IT Compliance, SOX Compliance
• Change Management
• Enterprise Risk Management
• Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards.
• Excellent command of written and spoken Japanese at native level to be able to communicate with stakeholders in Japan.
• Must be able to travel up to 25% of the time.
• Experience in Cloud technologies, OSINT and threat modeling will be advantageous.

What you can expect

The Third Party Cyber Security Assessor will conduct information security and business continuity assessments of third parties providing services to Bank of America. The assessor will examine a third party's program to determine if they meet the Bank’s requirements, identifying control gaps that may expose the Bank to risks and subsequently work with the third party on all remediation activities.

To succeed in this role, you should be highly independent, motivated and possess strong, hands-on, technical knowledge of a wide range of information security and business continuity controls and the processes used for evaluating their design and effectiveness and possess strong written and verbal communication skills including ability to communicate clearly and concisely to various levels, up to and including executive level management, and explain the need for key controls to technical and non-technical resources.

There will be opportunities to be involved in projects to improve processes & transform the assessment program. This will enable you to leverage and grow your leadership skills as you'll be expose to various internal stakeholders and industry partners.

What you will do

• Manage and execute assessments of third parties providing services to Bank of America.
• Evaluate design and effectiveness of controls implemented by third parties providing services to Bank of America
• Drive remediation of issues identified through the assessments and any subsequent risk conversations with the third parties and other internal stakeholders.
• Interface with external third parties and internal line of business stakeholders to provide consultation on information security topics and build strong working relationships with these parties.
• Partner with regional and global GIS teammates to collaborate on opportunities and to identify, analyze, and resolve complex problems or security gaps.
• Contribute to the development and transformation of the Third Party Cyber Assurance program
• Conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determine appropriate controls to mitigate risks.
• Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

About Bank of America

Our purpose as a firm is to make financial lives better, through the power of every connection. Across the world, we partner with leading corporate and institutional investors through our offices in more than 35 countries. In the U.S. alone, we serve almost all of the Fortune 500 companies and approximately 67 million consumer and small-business clients. We provide a full suite of financial products and services, from banking and investments to asset and risk management. We cover a broad range of asset classes, making us a global leader in corporate and investment banking, sales and trading.

Connecting Asia Pacific to the world

Our Asia Pacific team is spread across 19 cities in 12 markets. We are focused on connecting Asia to the world and the world to Asia, using our global expertise to ensure success is shared between us, our clients and our communities. Our regional footprint covers 12 currencies, more than a dozen languages and five time zones, placing us firmly among the region’s leading financial services companies.

Your background

• Previous information technology/security audit/assessment experience preferred.
• Ability to leverage attention to detail and analytical skills.
• Ability to multi-task and work both independently as well as part of an assessment team
• Ability to plan, execute and document assessment and remediation activities following established processes and procedures.
• Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
• Minimally, CISSP and/or CISA certifications are required as well as five to eight years of experience in information security or business continuity.
• Technical skills include the domains of information security and business continuity including:
  Information Security Controls (Cloud Security, Infrastructure Security, Access Management, Physical Security, Application Security, etc.),
  IT Compliance, SOX Compliance
  Change Management
  Enterprise Risk Management
  Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards.
• Must be able to travel up to 25% of the time.
• Experience in Cloud technologies, OSINT and threat modeling will be advantageous.

What you can expect

The Third Party Cyber Security Assessor will conduct information security and business continuity assessments of third parties providing services to Bank of America. The assessor will examine a third party's program to determine if they meet the Bank’s requirements, identifying control gaps that may expose the Bank to risks and subsequently work with the third party on all remediation activities.

To succeed in this role, you should be highly independent, motivated and possess strong, hands-on, technical knowledge of a wide range of information security and business continuity controls and the processes used for evaluating their design and effectiveness and possess strong written and verbal communication skills including ability to communicate clearly and concisely to various levels, up to and including executive level management, and explain the need for key controls to technical and non-technical resources.

There will be opportunities to be involved in projects to improve processes & transform the assessment program. This will enable you to leverage and grow your leadership skills as you'll be expose to various internal stakeholders and industry partners.

What you will do

• Manage and execute assessments of third parties providing services to Bank of America.
• Evaluate design and effectiveness of controls implemented by third parties providing services to Bank of America
• Drive remediation of issues identified through the assessments and any subsequent risk conversations with the third parties and other internal stakeholders.
• Interface with external third parties and internal line of business stakeholders to provide consultation on information security topics and build strong working relationships with these parties.
• Partner with regional and global GIS teammates to collaborate on opportunities and to identify, analyze, and resolve complex problems or security gaps.
• Contribute to the development and transformation of the Third Party Cyber Assurance program.
• Conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determine appropriate controls to mitigate risks.
• Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

About Bank of America

Our purpose as a firm is to make financial lives better, through the power of every connection. Across the world, we partner with leading corporate and institutional investors through our offices in more than 35 countries. In the U.S. alone, we serve almost all of the Fortune 500 companies and approximately 67 million consumer and small-business clients. We provide a full suite of financial products and services, from banking and investments to asset and risk management. We cover a broad range of asset classes, making us a global leader in corporate and investment banking, sales and trading.

Connecting Asia Pacific to the world

Our Asia Pacific team is spread across 19 cities in 12 markets. We are focused on connecting Asia to the world and the world to Asia, using our global expertise to ensure success is shared between us, our clients and our communities. Our regional footprint covers 12 currencies, more than a dozen languages and five time zones, placing us firmly among the region’s leading financial services companies.

Advanced Excel Skills are a must to enable you to be involved in: The production and development and analysis of standard and ad-hoc workforce reports for the Trust to agreed timetables. Provide workforce information on a weekly, monthly and ad-hoc basis for the Board and Trust Managers. Produce and submit mandatory regular and ad-hoc datasets to various agreed timescales, including but not exclusively data for NHSIE, ONS, WRES, WDES submissions, National Staff Survey, Local Pulse Surveys, Commissioners, and National Ambulance HR & CEO Groups. Data Cleansing and Quality and maintenance of ESR Work Structures. For further details / informal conversation please contact: Name: Andree Weymouth Job Title People Services Planning & Information Manager Email Address Andree.weymouth@eastamb.nhs.uk Telephone No: 07849 300989

• Years of experience: 8-14 years

• Must be able to operate an intrusion detection system and identify any suspicious traffic or activity on the network.

• Need to know best practices for identity and access management.

• Must be able to handle the complete threat spectrum and compliance of the organization's security policies or standard security practices.

• Must be able to analyse SIEM tools and services

• Should have a good working knowledge of the test and QA phase of internal development.

• Good to have CISSP/SSCP etc

• Years of experience: More than 15+ years

• Ability to perform analysis of log files from a variety of sources within the Network Environment or DMZ (including host logs, network traffic logs, firewall logs and IDS system logs)

• Strong program management background

• Background in IT Security & Risk Management

• Product specific certifications such as MCSE, CCNA security

• Very good knowledge of TCP/IP protocol

About the role

This position is part of the Technology Risk Management team (IT Second Line of Defence), responsible for security governance, policies, technology risk monitoring, risk reporting, risk assessment and related technology risk functions. He/she will need to work closely with IT, e.g. collecting of key risk indicators, review IT procedures (ensure compliance) and etc.

Key Responsibilities

• Familiar with MAS Security regulatory requirements and Bank’s policies and IT security best practices
• Part of the Technology Risk Mgmt team to maintain a strong governance and technology risk management process
• Responsible for crafting technology related policies and perform annual review to compliance to regulatory requirements
• Perform gap assessment against regulatory technology risk and cybersecurity requirements, monitor for changes or updates to the respective regulatory requirements, suggest recommendations, continuous improvement to the technology risk and cybersecurity framework when necessary
• Responsible for Technology Key Risk Indicator Reporting and Monitoring, work closely with relevant stakeholder to collect data for regular reporting and monitoring
• Responsible for Risk Register monitoring and necessarily follow up of treatment plan
• Provide security advisories when necessary
• Review assessment report, provide comment and independent view when necessary
• Stay up-to-date with current trends and regulations within the scope of Security, understand the latest threats, technologies and mitigation and provide necessary input to HO and local mgmt.

Skills and experience required

· Bachelor’s degree in Computer Science or equivalent

· Minimum 7 years’ experience within information security with at least 2 years in Technology Risk Management

· Good knowledge of the cyber threat landscape, cyber security technologies, including cloud security principles, practices and solutions.

· Experience on security assessment, improvement and solution finding

· Understanding of cloud platforms (e.g. AWS, Azure) and associated security controls

· Ability to develop security policy, standards and guidelines on best practices and industry standard

· Strong resilience personality, strong analytical and problem-solving skills, with the ability to think creatively and strategically to identify and mitigate potential cyber security risks

To apply online please use the apply function, alternatively you may contact Chloe Chen at chloe.chen(@)randstad.com.sg. (EA: 94C3609 /R1768253)

Overview of key responsibilities: Responsible for the provision of complex analysis to Service Improvement Managers, Clinical staff, senior managers, and other Trust staff, providing detailed interpretation and recommendations relating to the analysis. Provide advice and guidance on the interpretation of complex information reports Undertake data analysis including trend analysis with a strong focus on measurement for improvement. Scrutinise data and information sources across Moorfields in relation to the Service Improvement and Sustainability Programme and identify root cause of variances, trends, discrepancies or gaps Communicate analytical/statistical findings for a wide range of audiences, including nonanalytical professionals. Responsible for sourcing and manipulation of relevant datasets from internal/external systems as required to meet Programme requirements. Create interactive analyses, dashboards and KPI monitoring to present and report performance and other highly complex information, adjusting presentational styles to meet the requirements of different audiences. Ensure that all business information made available to users, is of a consistent standard and has full regard for issues of patient confidentiality and business sensitivity. Responsible for development and iteration of data models as required to inform effective management decision making. To use effective communication and questioning in order to understand the full scope of the information required. Communicate analytical/statistical information, advising of known issues and offering guidance on concepts used to aid understanding. To effectively communicate with line manager all pertinent issues arising in order to keep them informed of workload, the direction of travel and to receive feedback/support. Establish and maintain good communication with end users included interpreting requests for new work, validating outputs and seeking advice if the context or purpose is unclear To produce and maintain appropriate documentation for all development activities, datasets and structures. To work in conjunction with the central Performance and Information team, to keep abreast of dataset/reporting changes, sharing ideas and knowledge in order to inform best practice. The ability to use initiative and to manage own workload. To be proactive in gathering agreed information. Act as a visible champion for improvement and innovation. Building effective stakeholder networks both inside and outside the organisation.

Please see attached Job Description and Person Specification for further information about this role.

Please refer to the attached Job Description for more details. MKUH is committed to equal opportunities and improving the working lives of our staff and as such we offer a range of flexible working practices. We promote an inclusive workforce and encourage applications from applicants from all backgrounds. We reserve the right to expire vacancies prior to the advertised closing date once a sufficient number of applications have been received. MKUH uses identification scanning technology to confirm the authenticity of documents; all prospective employees of MKUH will have their original documents verified using this technology. By applying for this role, you accept if successful, that information from your application will be transferred into the national NHS Electronic Staff Record (ESR) system. Your personal data may be transferred from the Trust to another NHS organisation where your employment transfers within the NHS. This is in accordance with the streamlining programme which aims at saving you time and improving efficiencies within the NHS when your employment transfers. Upon commencing employment with the Trust, all employees (except Medical & Dental Staff on national terms and conditions) are subject to a probationary period lasting a period of six months with an option to extend for a further six months to a total of 12 months.

The main duties and responsibilities are detailed in the job description attached in the advert. The post holder will lead the Cyber Security team to deliver the Cyber and IG elements of the Digital Strategy. To ensure robust policies and processes are in place and monitored. Lead and support the wider governance agenda in digital including achieving the Data Security Protection Toolkit, managing Digital Change Control, Incident Management, Risk Management, Audit and action planning.

23rd April, 2024
CyberCX is Australias leading independent cyber security consultancy organisation. To support our rapid growth, we are looking motivated and passionate Security Analysts to work in our Brisbane office. In this role, youll work with your team to deliver great client outcomes and grow your career rapidly as a cyber security professional.  Were looking for candidates that have a sound and relevant technical background. You dont need extensive experience in security, but a passion to learn, a great attitude, and a keen interest in security is essential. You will receive formal and on the job training that will help you grow your career in the cyber security field.   Key responsibilities:    

Technical analysis of alerts and data from security products including (but not limited to) SIEMs, Intrusion detection and prevention systems, end point security solutions, web proxies and network security devices, and vulnerability scanning and management systems 


... Click here to view more detail / apply for Security Analyst

We're seeking a Senior Cyber Security Analyst to join our Sydney-based team on a permanent, full-time basis. In this role, you'll apply your passion for cyber security to contribute to a safer digital environment.


Your task and duties:

Conducting infrastructure scans for vulnerabilities and compliance validation, preferably using Infrastructure as Code (IaC) techniques and tools. Ensure optimized scanning coverage and implementation, and maintain the service.
Setting up and regularly monitoring backups, ensuring the availability of recovery plans, and validating the effectiveness of security measures using automated scanning tools.
Performing postmortem analysis to evaluate the impact of security incidents on data and infrastructure, identifying available recovery tools and processes, and recommending suitable solutions.
Collaborating with the broader assessment team to enhance and deliver security assessment services.
Managing SQL and NoSQL database architecture, data structures, and naming conventions to ensure the accuracy and integrity of all data master files.
Analyzing complex system architectures in cloud computing environments such as AWS, Azure, or GCP, including database management, monitoring, threat detection, and VPN servers.
Monitoring network traffic, auditing log files, and configuring highly available systems in the cloud.
Enhancing system security through regular system upgrades, patching, and implementing encryption layers in the network transport layer (SSL/TLS/mTLS).
Overseeing processes, procedures, and operational management related to system security and disaster recovery planning.
Troubleshooting and providing technical support to diagnose and resolve hardware and software issues across physical and virtual servers, both on-premises and in the cloud.
Ensuring the design and security of computer sites enable seamless integration of all components for optimal functionality. Additionally, monitoring and improving network performance and security during data transit and at rest.


Required Experience:
Mandatory industry certifications such as CISSP, CISM, CEH or GIAC.
5+ years of experience with vulnerability management solutions such as Tenable Security Center.
Profound understanding of security in Cloud computing and other cyber security standards/frameworks, including CIS Benchmarks, NIST CSF, ISO 27001, PCI-DSS, and CVSS.
Familiarity with CIS Benchmarks related to infrastructure configuration.
Exposure to ticketing solutions like ServiceNow and Jira.
Application development experience in SQL, PHP, Python, HTML, JavaScript, NodeJs, or C#.
Technical understanding of web technologies and vulnerability assessments of web applications within cloud environments (e.g., AWS/Azure/GCP).
Familiarity with firewalls, intrusion prevention systems, and management/review systems such as Fortinet and Tufin.
Diverse Cyber background with knowledge across a broad range of technologies, including:
Network Security
Microsoft EDR Stack
SecOps & GRC (APRA CPS234, PCI-DSS, ISO 27001, SOC 2, and NIST)
Cloud Platforms (AWS, Azure, GCP)
Application/Infrastructure Security Concepts (OWASP)
Email Security (SPF, DKIM, DMARC)
Database Security (Mysql, Postgres DB, SQL server)
Orchestration/Virtualisation (Ansible, Kubernetes, VMware)
Cryptography and PKI (Microsoft Certificate Authority, Hashicorp Vault)

The annual salary for this role is $120,000 - $140,000 plus superannuation.

If you're interested, please apply. Kindly note that only shortlisted candidates will be contacted. For any inquiries, please reach out to us at career@tiuma.com.au.


A BIT ABOUT US
At Tiuma Cyber Security Solutions, we are dedicated to safeguarding businesses and individuals against ever-evolving cyber threats. With a team of highly skilled experts, we strive to provide comprehensive security solutions tailored to meet the unique needs of each client.


The values that our people live and make decisions by at Tiuma are:
People are most important: Build long-term relationships by always acting with integrity while communicating openly and honestly.
Strive for quality outcomes: Focus on getting results through the meeting point of commercial, technical, and product excellence.
Live for challenges: Face problems with a smile and enthusiasm, relishing a challenge because it makes life that much more interesting.
Always learn and apply: Continuously pursue new knowledge about yourself, your customers and your craft then find ways to apply and test your new knowledge.
Strong opinions weakly held: Back yourself but always be looking for and open to alternative viewpoints in data and from others because strong, diverse opinions are necessary to get quality outcomes.

Job description

Primary Objectives of Position

Manage information security operation to ensure the safe use of information systems and assets as well as protect information assets against cybersecurity threats.

Manage various stages of projects in conception and initiation, planning, execution, performance/ monitoring, and project closure.

Job Responsibilities

• Establish, implement, and maintain a sustainable information security framework that effectively addresses evolving and diverse cybersecurity threats.

• Perform risk assessments on IT systems, network and applications for vulnerabilities and implement security controls to reduce identified risks to an acceptable level.

• Perform information security audits to determine security violations and inefficiencies and recommend effective security controls.

• Hold management review and lessons learned meetings to help improve information security measures and incident handling process.

• Monitor security alerts/ logs from IT systems, network and applications against baselines and gather publicly available information to identify precursors or indicators of cybersecurity attacks.

• Contain and eradicate cybersecurity incident effectively to prevent recurrence and restore systems and recover normal operations as quickly as possible.

• Publish security advisories, conduct security workshops, and share lessons learned to improve users’ awareness regarding information security matters.

• Oversee information security investigations with internal team, funders, and local authorities and/ or 3rd party providers.

• Participate in various meetings and share compliance/ performance reports and audit findings to Management teams.

• Liaise with internal and external stakeholders in implementing information security related measures or projects.

The above activities are no means exhaustive and are subjected to amendment whenever is needed.

Job Requirements

Minimum Education / Qualifications

• Degree in Information systems or equivalent.

Minimum Years of Relevant Experience

• 2 years’ experiences in setting up and managing information security operations.

Knowledge/Skills

• Experiences in ISO27001 ISMS, CIS, and/ or NIST frameworks.

• Experiences in managing threat, vulnerability and incident, and understanding in digital forensic investigation, tools, and processes.

• Knowledge in security protections, practices, or solutions like Firewall, IDS/ IPS, network segmentation, DLP, WAF, NAC, WiFi security, cryptography, endpoint protection, OWASP, etc.

• Certifications in CISA, CISM, CISSP and/ or PMP will be an advantage.

• Knowledgeable in Microsoft Office and other Windows and web applications.

Attributes (functional or leadership competencies)

• Meticulous and hands on.

• Excellent communication and written skills.

• Strong analytical and problem-solving skills.

• Team player with excellent interpersonal skills and multi-tasker.

• Customer-centric and proactive.