360 Cybersecurity Analysts jobs in Malaysia
Information Security Analyst
Posted today
Job Viewed
Job Description
About VDart Malaysia
We are Purpose Driven, High Growth and a Great Place to Work Certified Organization
VDart Malaysia is one of the fastest growing talent management and digital solution providers established in the year 2007. As part of our continued Global Growth Strategy, we are excited to bring digital capabilities to Malaysia. VDart Malaysia Sdh Bhd will serve as our Regional Headquarters for ASEAN region. We are committed in bringing world class technology, build strong digital talent pool in emerging technologies and transform how businesses leverage technology in Malaysia. We serve various customers including Fortune 100 companies across various domains globally. VDart Malaysia partners with industry leaders in Cloud, Intelligent Automation, IoT, Customer experience, and Security solutions. With distinct digital practices, we help our partners to build for tomorrow by reimaging their business today. From helping our partners to bridge talent in product development and embedded software, we provide resources and solutions globally across a wide range of industries, from automotive and mobility to energy, healthcare, and life sciences, manufacturing, consumer industries, and beyond.
Come join us to create the digital future
Job Title: Information Security Analyst (Executive Level)
Job Overview
We are seeking a proactive Information Security Analyst (Executive Level) to safeguard the company's IT infrastructure, both on-premise and in the cloud. This role involves implementing security strategies, managing risks, supporting client audits, and ensuring compliance with security standards to protect critical information assets.
Key Responsibilities
Strategy Development – Develop and implement a comprehensive information security strategy aligned with organizational goals.
Policy & Compliance – Establish, review, and maintain robust information security policies and procedures for on-premise and cloud environments.
Risk & Vulnerability Management – Perform regular risk assessments, security audits, vulnerability assessments, and penetration tests.
Remediation Planning – Develop and execute remediation plans for identified vulnerabilities.
Incident Response – Monitor and respond promptly to security incidents, breaches, and threats.
Client Audit Support – Represent the company during client audits, providing clear documentation and explanations of security measures.
Collaboration – Work with internal teams and external suppliers to ensure compliance and effective risk mitigation.
System Security – Partner with IT teams to maintain secure network and system architecture.
Knowledge Update – Stay updated on emerging threats, technologies, and industry best practices.
SSL & Domain Management – Monitor SSL certificates and domain expiration dates to ensure timely renewals.
Asset Lifecycle Management – Track IT assets nearing end-of-support status and oversee upgrades or replacements.
Obsolescence Planning – Assist the Head of Department in executing obsolescence plans to maintain secure and reliable IT assets.
Interested candidates please share your updated resume to
B Information Security Analyst
Posted today
Job Viewed
Job Description
Job Responsibilities:
•Develop and implement a comprehensive information security strategy aligned with organizational goals.
•Establish, review, and maintain robust information security policies and procedures.
•Ensure security policies are relevant for both on-premise and cloud environments.
•Perform regular risk assessments, security audits, vulnerability assessments, and penetration tests.
•Develop and execute remediation plans for identified security vulnerabilities.
•Monitor and respond to security incidents, breaches, or threats in a timely manner.
•Represent the company during client audits, providing documentation and explanations of security measures.
•Collaborate with internal teams and external suppliers to ensure compliance with security standards and timely risk mitigation.
•Work with IT teams to maintain secure network and system architecture.
•Stay up to date on emerging security threats, technologies, and industry best practices.
•Monitor SSL certificates and domain expiration dates, ensuring timely renewals.
•Oversee IT assets nearing end-of-support status, ensuring timely upgrades or replacements.
•Assist the Head of Department in executing obsolescence plans to ensure IT assets remain secure, relevant, and reliable.
Job Type: Permanent
Pay: RM5, RM6,500.00 per month
Benefits:
- Professional development
Work Location: In person
Information Security
Posted today
Job Viewed
Job Description
We are looking for a highly motivated and experienced Information Security & Cloud Compliance Specialist to lead our organization's journey towards ISO/IEC 27001 certification and strengthen our overall cloud and internal IT security posture. This role will be pivotal in building and maintaining our Information Security Management System (ISMS), managing IT asset governance, and addressing client security compliance requirements.
You will also be responsible for guiding and supervising a junior executive, who will support the implementation and daily management of our internal controls.
Key Responsibilities
ISO/IEC 27001 Implementation & Governance
Lead the planning and execution of ISO/IEC 27001 implementation across the organization
- Conduct risk assessments, gap analyses, and drive remediation efforts
- Develop and maintain ISMS policies, procedures, and documentation
- Coordinate with internal teams to implement and monitor security controls
Prepare for internal audits and manage external certification activities
Cloud Security & Governance
Define and implement security controls across cloud platforms (e.g., Alibaba Cloud, Google Cloud Platform)
- Perform cloud configuration reviews, identity and access management checks, and vulnerability assessments
- Work with DevOps/Infra teams to enforce secure cloud deployment practices
- Monitor cloud environments for potential threats and respond to security incidents
3.
Internal IT & Asset Security
- Establish and maintain an IT asset inventory (hardware, software, digital assets) in line with ISO 27001 controls
- Define policies for asset ownership, classification, labelling, and acceptable use
- Ensure internal systems such as Active Directory are securely configured and maintained
Collaborate with internal IT support to implement and monitor endpoint and network security
Client Security Compliance & Support
Act as the primary point of contact for client security reviews and due diligence requests
- Respond to RFPs, vendor security questionnaires, and client audits
- Provide documentation and assurance aligned with ISO 27001, PDPA, and other industry frameworks
5. Security Monitoring & Incident Response
- Develop and maintain incident response plans, including investigation, reporting, and corrective actions
- Monitor security events and coordinate incident response activities with internal teams
Maintain security logs, reports, and metrics for audits and continual improvement
Team Leadership
Supervise and mentor a junior executive supporting policy enforcement, documentation, and control tracking
- Assign and review tasks to ensure quality and timeliness of ISMS initiatives
- Promote a culture of security awareness across the organization
Qualifications
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related discipline
- At least 3 years of hands-on experience in IT security, cloud security, or compliance-related roles
- Proven experience in ISO/IEC 27001 implementation or audits
- Familiarity with cloud security practices on platforms like Alibaba Cloud or GCP
- Knowledge of IT asset management processes and internal IT control frameworks
- Good understanding of Malaysian regulations such as PDPA and industry data protection standards
- Excellent interpersonal and communication skills; able to work across business and technical teams
- Able to work independently and take initiative in a fast-paced environment
Bonus
- Certification in
ISO 27001 Lead Implementer
,
CompTIA Security+
,
CISSP
, or
Cloud Security Certifications - Experience with
SIEM tools
,
cloud monitoring
, or
security automation - Familiarity with IT service management tools (e.g., Jira, ServiceNow)
- Basic scripting/automation knowledge (e.g., Python, Bash)
Information Security Specialist (Business Information Security)
Posted today
Job Viewed
Job Description
Are you passionate about protecting what matters most? We're seeking someone who is passionate about identifying and implementing security solutions that make bp a cyber resilient organisation! Our Business Information Security team partners with the business to help them understand cyber risk and be accountable for cyber security.
We're looking for curious minds who are driven by opportunities to build value and deliver secure products and services to advance bp's strategy.
What you will deliver In this role you will deliver security activities to support bp's business. This role focuses on hands-on security assessment and advisory activities with the following key accountabilities:
Security Assessments : We need someone that can conduct comprehensive assessments of systems, identifying risks and issues while recommending appropriate remediation measures.
Technical & Non-Technical Risk Advisory : You'll assess and communicate cybersecurity risks. We want our customers to understand potential impacts and mitigation strategies clearly.
Cyber Behaviour Promotion : We strive to build a strong cyber security culture. You'll assist with the development and promoting good cyber behaviours in day-to-day operations.
Incident Management Support : When security incidents happen, we need you to provide specialist security expertise. You'll support incident response activities and improvement recommendations.
Customer Support : We want you to act as the go-to point of contact for information security. You'll provide timely and accurate expertise on security matters affecting their systems or data.
Assess and Evaluate : You'll perform regular security assessments of business systems. We use established methodologies to identify potential risks, weaknesses and security gaps.
Respond and Advise : We require someone who can offer our customers practical and tailored cyber security solutions. These solutions must align with operational requirements.
Analyze and Report : You'll evaluate risks and prepare clear, actionable recommendations, and communicate these with both business and technical audiences.
Support and Collaborate : We work closely with business teams to implement security measures. You'll help maintain robust security posture while aligning with operational needs.
Promote and Educate : We nurture positive cyber security behaviours! You'll work through targeted awareness activities, training support, and expert guidance.
Monitor and Review : We want someone who understands the security landscape affecting bp systems and stay ahead of emerging threats and industry standard methodologies.
What you will need to be successful (experience and qualifications)
Bachelor's degree or equivalent experience in Information or Cyber Security, Computer Science, Engineering.
Working towards professional certifications such as Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), or CompTIA Security+.
Knowledge of security frameworks such as ISO 27001/2, NIST, and CIS framework.
Previous track record in information security roles in Finance, HR, Trading, Retail, Supply or Oil and Gas companies.
Ability to explain security concepts to a variety of audiences.
Solid grasp of cyber risk assessment methodologies and the ability to translate technical findings into business impact assessments.
Attention to detail and ability to work independently while balancing multiple activities.
Ability to adapt security recommendations to different operating environments.
Ability to use technology, data, and insights to enable decision making.
About bp Bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people's lives. We are committed to creating a diverse and inclusive environment where everyone can grow and succeed. Join bp and become part of the team building our future!
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
Travel Requirement No travel is expected with this role
Relocation Assistance This role is not eligible for relocation
Remote Type This position is a hybrid of office/remote working
Skills Automation system digital security, Client Counseling, Conformance review, Digital Forensics, Incident management, incident investigation and response, Information Assurance, Information Security, Information security behaviour change, Intrusion detection and analysis, Legal and regulatory environment and compliance, Risk Management, Secure development, Security administration, Security architecture, Security evaluation and functionality testing, Solution Architecture, Stakeholder Management, Supplier security management, Technical specialism
Legal Disclaimer We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp's recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.
If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.
#J-18808-Ljbffr
Information Security Officer
Posted 2 days ago
Job Viewed
Job Description
List of Responsibilities:
Ongoing leadership and review of IT security
Implementing and designing cyber security policies, procedures and system solutions in line with industry standards and certifications
Operate, conduct, and maintain DUG’s SIEM platform and conduct regular security audits of systems, policies, procedures, network configuration, operating systems, authentication systems, permission structures
Serve as the DUG point person for third-party security audit(s)
Provide pre-sales security briefings / Q&A to DUG HPC Cloud customer security teams
Work with DUG HPC Cloud customers and DUG teams on security integration
Provide strategic-level guidance for DUG’s cyber security program and ensure compliance with cyber security policy, standards, regulations and legislation, working with the senior executives within DUG.
Ensure the alignment of cyber security and business objectives within DUG. To achieve this, you will facilitate communication between cyber security and business stakeholders. This includes translating cyber security concepts and language into business concepts and language as well as ensuring that business teams consult with cyber security teams to determine appropriate security measures when planning new business projects. Additionally, you will be responsible for the development of the strategic-level cyber security program, being best placed to advise projects on the strategic direction of cyber security.
Contribute to the development and maintenance of DUG’s business continuity and disaster recovery plans, with the aim to improve business resilience and ensure the continued operation of critical business processes
Report on the DUG’s security risk profile, the status of key systems and any outstanding security risks, any planned cyber security uplift activities, any recent cyber security incidents, and expected returns on cyber security investments
Oversee DUG’s response to cyber security incidents, including how internal teams respond and communicate with each other during an incident
Ensure that a consistent vendor management process is applied across their organisation, from discovery through to ongoing management
Information Security Specialist
Posted 3 days ago
Job Viewed
Job Description
#J-18808-Ljbffr
Information Security Specialist
Posted 4 days ago
Job Viewed
Job Description
Join to apply for the Information Security Analyst role at Razer Inc.
Join to apply for the Information Security Analyst role at Razer Inc.
Get AI-powered advice on this job and more exclusive features.
Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work , offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric experience that will put you in an accelerated growth, both personally and professionally.
Job Responsibilities
We are looking for a skilled and analytical Information Security Analyst to join our team. In this role, you’ll be at the forefront of protecting our systems by identifying vulnerabilities, responding to threats, and continuously improving our security posture.
This position offers valuable hands-on experience in cybersecurity. If you're eager to learn and build a career in this field, we encourage you to apply.
Essential Duties And Responsibilities
- Conduct vulnerability assessments and provide actionable remediation plans
- Perform penetration testing on networks, applications, and infrastructure.
- Review and optimize firewall rules and configurations.
- Monitor, analyze, and respond to security events and incidents, ensuring timely resolution and root cause analysis
- Investigate and respond to security incidents in a timely manner.
- Review and validate bug bounty submissions, coordinating with researchers and internal teams.
- Collaborate with IT, DevOps, and compliance teams to implement security best practices.
- Collaborate closely with business units to provide expert support and guidance on information security matters.
- Champion security awareness initiatives within the business, promoting a culture of security consciousness and best practices.
- Perform ad hoc tasks that are assigned by team leader or team manager.
- Candidate must possess at least a Bachelor's Degree, Post Graduate Diploma, Professional Degree, Computer Science/Information Technology/Security or equivalent. (candidates with relative levels of related experience will be considered).
- At least 3-5 years of hands-on working experience in cybersecurity, ethical hacking or information/IT security is required for this position.
- Possession of industry-relevant certifications such as CompTIA Security+, CEH, OSCP, or similar will be advantageous.
- For lead roles, experience in people management, ability to lead and influence people is expected.
- Hands-on experience with tools such as Burp Suite, Metasploit, Nessus, Qualys, Splunk, and SIEM platforms.
- Strong understanding of network protocols, web application security, and threat detection.
- Knowledge of AWS Cloud Computing services and experience with Linux servers is essential.
- Independent with excellent analytical skills, a problem-solving attitude, and the ability to work well in a team environment.
- Applicants must be willing to work in ICITY SHAH ALAM.
Pre-Requisites
Are you game? Seniority level
- Seniority level Mid-Senior level
- Employment type Full-time
- Job function Information Technology
- Industries Computers and Electronics Manufacturing
Referrals increase your chances of interviewing at Razer Inc. by 2x
Get notified about new Information Security Analyst jobs in Shah Alam, Selangor, Malaysia .
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 2 months ago
Petaling Jaya, Selangor, Malaysia 6 days ago
Petaling Jaya, Selangor, Malaysia 21 hours ago
(Senior) Cyber Security Consultant & Penetration TesterWP. Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 4 months ago
(TRC) Manager - Cyber Response (Petaling Jaya)Kuala Lumpur City, Federal Territory of Kuala Lumpur, Malaysia 1 week ago
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 1 week ago
Federal Territory of Kuala Lumpur, Malaysia 3 days ago
Federal Territory of Kuala Lumpur, Malaysia 4 days ago
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 4 months ago
Federal Territory of Kuala Lumpur, Malaysia 2 days ago
WP. Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 3 weeks ago
Wilayah Persekutuan Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 2 days ago
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 4 days ago
WP. Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 1 week ago
Internship - Network & Information Security EngineerKuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 4 months ago
Federal Territory of Kuala Lumpur, Malaysia 4 days ago
Security Operations & Governance Analyst (1 year Contract)Federal Territory of Kuala Lumpur, Malaysia 2 weeks ago
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 4 months ago
Cyber Security Analyst (Governance, Risk & Compliance)Federal Territory of Kuala Lumpur, Malaysia 1 week ago
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 1 month ago
Associate Manager - Security Compliance AnalystPetaling Jaya, Selangor, Malaysia 1 month ago
Cyber Security (Digital Forensic Analyst) AVP, Data Security Engineer, Group Information SecurityFederal Territory of Kuala Lumpur, Malaysia 4 days ago
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 1 week ago
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 2 weeks ago
Senior Information Security Engineer (ISE)Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 1 month ago
Operational Technology (OT) Security Analyst Security Operations Analyst- APAC Blue Team LeaderKuala Lumpur City, Federal Territory of Kuala Lumpur, Malaysia 1 week ago
Associate Manager - Security Compliance AnalystPetaling Jaya, Selangor, Malaysia 2 days ago
Kuala Lumpur City, Federal Territory of Kuala Lumpur, Malaysia 1 year ago
(Senior) Security Engineer, Security Engineering & Threat IntelligenceKuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 1 week ago
Cyber Security Metrics and Behavioural AnalystKuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 1 week ago
Federal Territory of Kuala Lumpur, Malaysia 4 days ago
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia 2 weeks ago
Petaling Jaya, Selangor, Malaysia 7 months ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-LjbffrBe The First To Know
About the latest Cybersecurity analysts Jobs in Malaysia !
Information Security Officer
Posted 4 days ago
Job Viewed
Job Description
- Ongoing leadership and review of IT security
- Implementing and designing cyber security policies, procedures, and system solutions in line with industry standards and certifications
- Operate, conduct, and maintain DUG’s SIEM platform and conduct regular security audits of systems, policies, procedures, network configuration, operating systems, authentication systems, permission structures
- Serve as the DUG point person for third-party security audits
- Provide pre-sales security briefings / Q&A to DUG HPC Cloud customer security teams
- Work with DUG HPC Cloud customers and DUG teams on security integration
- Provide strategic-level guidance for DUG’s cyber security program and ensure compliance with cyber security policies, standards, regulations, and legislation, working with senior executives within DUG
- Ensure the alignment of cyber security and business objectives within DUG, facilitating communication between cyber security and business stakeholders, translating cyber security concepts into business language, and advising on security measures for new projects
- Contribute to the development and maintenance of DUG’s business continuity and disaster recovery plans to enhance resilience and ensure operational continuity
- Report on the security risk profile, status of key systems, outstanding risks, security uplift activities, recent incidents, and cybersecurity investment returns
- Oversee DUG’s response to cybersecurity incidents, including internal communication and response strategies
- Apply a consistent vendor management process across the organization, from discovery to ongoing management
Information Security Specialist
Posted 8 days ago
Job Viewed
Job Description
Overview
Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work , offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.
Responsibilities- We are looking for a skilled and analytical Information Security Analyst to join our team. In this role, you’ll be at the forefront of protecting our systems by identifying vulnerabilities, responding to threats, and continuously improving our security posture.
- This position offers valuable hands-on experience in cybersecurity. If you're eager to learn and build a career in this field, we encourage you to apply.
- Conduct vulnerability assessments and provide actionable remediation plans
- Perform penetration testing on networks, applications, and infrastructure.
- Review and optimize firewall rules and configurations.
- Monitor, analyze, and respond to security events and incidents, ensuring timely resolution and root cause analysis
- Investigate and respond to security incidents in a timely manner.
- Review and validate bug bounty submissions, coordinating with researchers and internal teams.
- Collaborate with IT, DevOps, and compliance teams to implement security best practices.
- Collaborate closely with business units to provide expert support and guidance on information security matters.
- Champion security awareness initiatives within the business, promoting a culture of security consciousness and best practices.
- Perform ad hoc tasks that are assigned by team leader or team manager.
- Candidate must possess at least a Bachelor's Degree, Post Graduate Diploma, Professional Degree, Computer Science/Information Technology/Security or equivalent. (candidates with relative levels of related experience will be considered).
- At least 3-5 years of hands-on working experience in cybersecurity, ethical hacking or information/IT security is required for this position.
- Possession of industry-relevant certifications such as CompTIA Security+, CEH, OSCP, or similar will be advantageous.
- For lead roles, experience in people management, ability to lead and influence people is expected.
- Hands-on experience with tools such as Burp Suite, Metasploit, Nessus, Qualys, Splunk, and SIEM platforms.
- Strong understanding of network protocols, web application security, and threat detection.
- Knowledge of AWS Cloud Computing services and experience with Linux servers is essential.
- Independent with excellent analytical skills, a problem-solving attitude, and the ability to work well in a team environment.
- Applicants must be willing to work in ICITY SHAH ALAM.
Are you game?
#J-18808-LjbffrInformation Security Specialist
Posted 8 days ago
Job Viewed
Job Description
Job Responsibilities:
Help and support the head of department with the day-to-day information security tasks, such as risk assessment, monitoring, reporting, and advice.
Responsible for locating and fixing security flaws in the networks and computer systems of an organization.
Strong familiarity with vulnerability assessment and scanning to identify holes and vulnerabilities.
Conduct vulnerability assessments to find gaps in information security guidelines and evaluate risks that have been identified.
Collaborate with the IT team to address security flaws that could lead to improper use of data.
Work closely with the head of the department to establish security guidelines for the organization by defining standards and best practices to guarantee information availability, confidentiality, and integrity.
Inform staff members about security and technological best practices.
Job Requirements:
An IT bachelor’s degree or a professionally equivalent degree.
At least two to three years of professional expertise in system/network administration, compliance cloud services, information security incidents (cybersecurity), or IT governance is advantageous.
Thorough understanding of the principles of application security and cloud infrastructure.
Proficient in identifying and evaluating security risk mitigation measures and solutions.
Customer-focused, possessing a strong sense of accountability, a strong desire to achieve goals, and a keen interest in customer satisfaction.
The capacity and willingness to quickly learn new ideas and technology.
Excellent communication abilities, both written and verbal, for presentations.
Proficient in writing and speaking in English.
The capacity to work independently, multitask, and adhere to deadlines.
Dependable, adaptable, and eager to learn.