Total 4 legal public security job vacancies in kuala lumpur

Overview: We are seeking an experienced Legal Manager to oversee and manage our litigation and tenancy matters. This role is crucial in ensuring our company’s compliance with legal standards while effectively managing legal disputes and tenancy agreements.

Key Responsibilities:

Litigation Management:

• Lead and manage all aspects of litigation, including strategy, preparation, and representation.
• Coordinate with external counsel and ensure effective legal representation in court.
• Monitor and report on ongoing litigation cases, providing regular updates to senior management.
• Develop and implement strategies to minimize litigation risks and costs.

Tenancy Management:

• Oversee tenancy agreements, ensuring compliance with legal and regulatory requirements.
• Handle disputes related to tenancy agreements, including negotiations and resolutions.
• Advise on lease terms, renewals, and terminations, ensuring alignment with company interests.
• Draft and review tenancy contracts, ensuring accuracy and legal soundness.

Compliance and Risk Management:

• Ensure adherence to all relevant laws, regulations, and company policies.
• Conduct legal research and stay updated on relevant changes in legislation affecting litigation and tenancy.
• Develop and implement internal policies and procedures to mitigate legal risks.

Leadership and Collaboration:

• Provide legal guidance and support to various departments within the company.
• Collaborate with senior management to align legal strategies with business objectives.
• Mentor and manage junior legal staff, fostering a collaborative and effective legal team.

Perks & Benefits

• Employee equity
• Nearby public transport
• Central location
• Medical insurance
• Personal leave
• Personal development opportunities
• Fitness membership
• Dental insurance
• Vision insurance

概述：我們正在尋找一位經驗豐富的法律經理來監督和管理我們的訴訟和租賃事務。這個角色對於確保我們公司遵守法律標準、同時有效管理法律糾紛和租賃協議至關重要。

主要職責：

訴訟管理：

• 領導和管理訴訟的各個方面，包括策略、準備和代理。
• 與外部律師協調並確保在法庭上有效的法律代表。
• 監控和報告正在進行的訴訟案件，定期向高階管理層提供最新資訊。
• 制定並實施策略以盡量減少訴訟風險和成本。

租賃管理：

• 監督租賃協議，確保遵守法律和監管要求。
• 處理與租賃協議相關的爭議，包括談判和解決。
• 就租賃條款、續約和終止提供建議，確保符合公司利益。
• 起草和審查租賃合同，確保準確性和合法性。

合規與風險管理：

• 確保遵守所有相關法律、法規和公司政策。
• 進行法律研究並隨時了解影響訴訟和租賃的立法的相關變化。
• 制定並實施內部政策和程序以降低法律風險。

領導力與協作：

• 為公司內部各部門提供法律指導與支援。
• 與高階管理層合作，使法律策略與業務目標一致。
• 指導和管理初級法律人員，培養一支協作高效的法律團隊。

津貼和福利

• 員工股權
• 附近的公共交通
• 中心位置
• 醫療保險
• 事假
• 個人發展機會
• 健身會員資格
• 牙科保險
• 視力保險

Are you passionate about offensive security, enjoy breaking down walls with an array of tools and techniques, and continuously learning about the offensive security world? We are seeking a dynamic Cyber & Offensive Security Risk Lead to join our Data, Technology & Cyber Risk function.

Job Description:

The Cyber & Offensive Security Risk Lead will assist the Chief Information Security Officer to establish and maintain robust governance and oversight over the effectiveness of cyber risk management to ensure that the Bank’s technology and information assets are adequately protected.

Primary Responsibilities:

• Assist with the development, review, update and/or roll-out of cyber risk-related framework, policy, and initiatives to facilitate effective risk management and governance over cyber risk management.
• Review and assess the extent of compliance with internal policies, procedures, standards and regulatory requirements.
• Provide advisory, guidance and challenge to Business Units and Functional Units in their management of cyber risks to achieve their business objectives and within the Bank’s risk appetite.
• Conduct independent assessments on the adequacy and effectiveness of control measures implemented by the 1st Line of Defense (FLOD), and recommend mitigation actions to address vulnerabilities, if any.
• Lead Red Team (offensive cyber) activities to proactively simulate real-world cyber-attacks on the Bank’s security controls to identify and exploit security weaknesses and vulnerabilities.
• Provide recommendations and remediation strategies to address security vulnerabilities identified during offensive cyber activities.
• Establish relevant Key Risk Indicators (KRIs) and metrics to monitor and measure cyber risk exposures.
• Prepare and present cyber risk reports to Senior Management and relevant committees, highlighting key findings, trends and/or recommendations.
• Respond to enquiries and audits (i.e. internal, external and regulatory) pertaining to cyber risks.
• Where required, collaborate with the Bank’s cyber incident response team to provide advice and/or support during security incidents and cyber-attacks.
• Conduct cyber risk awareness training across the Bank, fostering cyber risk awareness and a security-conscious culture.
• Stay abreast of emerging cyber threats, vulnerabilities, attack techniques, and regulatory developments to proactively address potential cyber risks, and assist the Management (and/or Board) understand potential concerns or risks that might impact the Bank.

Qualifications:

• Bachelor’s degree in computer science, Information Security or a related field.
• Minimum of 15 years’ experience in any of these disciplines: offensive security, information security, risk management or compliance in related areas.
• Professional certification such as CISSP, CCSP, CGRC, CISM, CISA, CRISC, CompTIA PenTest+, Offensive Security (e.g. OSCP, OSCE, OSWE & OSWP), SANS (e.g. GXPN, GWAPT, GPEN & GMOB), Zero-Point Security and/or CREST would be advantageous.
• Sound knowledge in regulatory requirements around technology risk and cyber resilience.
• Knowledge of network protocols, operating systems, application security and cloud security.
• Possess strong verbal and written communication skills, and capable of engaging senior stakeholders.
• Clear analytical thought process and good understanding of emerging technological developments and risk management frameworks.

Perks & Benefits

• Allowance (transportation, parking etc.)
• Nearby public transport
• Smart casual dress code
• Medical insurance
• Annual leave, Birthday Leave etc

責任

✍ 負責與網路安全要求和新興相關ICT技術相關的端到端整體解決方案和服務活動，以實現最佳水準的網路安全機密性、完整性和可用性標準。
✍ 負責網路安全指南、基準、標準和流程的持續維護、監控和更新。這包括預測成長以確保可擴展性，評估基準、觀察或其他行業最佳實踐帶來的增強價值，並在需要時納入變更。
✍ 負責建立和維護業務工作流程和技術的現況和未來安全流程和工作指導。
✍ 開發並推薦知識開發以及文件化實務和工程知識抵押品的創建。
✍ 技術專家提供全面的解決方案和工程，以建構技術解決方案的技術要求。
✍ 提供IT 解決方案工程和設計建議的IT 安全諮詢和審查服務，以確保解決方案符合IT 安全要求，從而保護客戶的IT 基礎設施和系統。
✍ 提供適用於各種開發技術的技術專業知識和諮詢。
✍ 負責為客戶的整個網路和系統基礎設施分析、評估和推薦最佳的資訊安全技術和解決方案。
✍ 負責從安全角度和角度進行符合客戶安全控制和基線的解決方案評估、POC、UAT。
✍ 就資訊安全問題提供建議和諮詢，並為各個內部團隊和部門提供建議。
✍ 對新出現的內部和外部威脅、技術趨勢和減輕 IT 安全風險的方向進行研究和環境掃描，並透過跨 IT 部門和職能部門的協作進行評估，以改善 IT 安全基礎設施和服務。
✍ 規劃、研究、分析、評估和推薦資訊安全技術解決方案、方向和採用。
✍ 研究和開發新的資訊安全技術以改善和創造商業機會。
✍ 與外部 IT 安全專家和其他 IT 組織建立和維護策略關係/網路和協作，以衡量和改善客戶向利害關係人提供的網路安全基礎設施服務。

要求

✍ 電腦科學、資訊系統、工程學、軟體工程或任何相關學科的學士學位。
✍ 在技術相關領域擁有約 8-10 年的經驗，並具有相關 IT 安全領域和工程的具體專業知識。
✍ 具有撰寫和支援策略性商業策略的經驗，並具有以業務為中心的心態。
✍ 清楚地了解如何根據特定的架構原則將安全架構和設計轉化為詳細的技術組件。
✍ 此角色需要掌握安全工程生命週期並了解企業安全架構環境。
✍ 網路安全治理、指南和風險以及網路安全解決方案領域的基礎知識。
✍ IT 網路的基礎知識以及對 OT 和物聯網架構和工程的更好理解。
✍ 具有強化練習和技術合規性保證練習的經驗。

工作亮點

✅ 僅限馬來西亞本地人。
✅ 每週工作 5 天，採用混合工作安排。
✅ 極佳的成長和職涯發展機會。
✅ 有競爭力的薪資待遇。
✅ 偉大的跨國公司（能源部門）工作文化。