Manager, Cybersecurity Engineering & Operations

We value our people and encourage everyone to grow professionally. If you think this opportunity is right for you, we encourage you to apply! Job Description: Job Description : Cybersecurity Architecture & Strategy • Define and maintain enterprise cybersecurity architecture across IT, OT, and cloud environments. • Establish security design standards, principles, and reference architectures. • Act as the technical authority for security architecture designs, control implementations & cybersecurity technology selection • Ensure all systems and initiatives are secure-by-design and aligned with business and risk requirements. • Lead cybersecurity transformation initiatives from strategy through delivery. Security Engineering & Technology Management • Own the full lifecycle of cybersecurity technologies starting from technology evaluation, procurement, deployment, optimization, and retirement. • Manage key security platforms including: • SIEM / SOC • Endpoint Security (AV, EDR, XDR) • PAM (implementation and operations) • DLP and data security • Network and cloud security solutions • Zero Trust and secure access technologies • Ensure solutions are scalable, integrated, and optimized for operational effectiveness. • Define engineering standards, implementation patterns, and system integrations. Application & Cloud Security • Integrate security into SDLC and DevSecOps practices. • Oversee application security testing (SAST, DAST, penetration testing). • Manage cloud security posture, including identity, access control, encryption, and configuration management. Security Operations & Incident Response • Lead and manage Security Operations Center (SOC), whether internal or MSSP-based. • Oversee threat monitoring and detection, incident response and containment and cyber investigation and root cause analysis • Establish and maintain incident response plans, playbooks, and escalation procedures. • Ensure timely remediation and recovery to minimize business impact. Cyber Analytics & Investigation Execution • Operate and optimize SIEM, threat intelligence, and security analytics platforms. • Conduct detailed cyber investigations in accordance with forensic and evidentiary requirements. • Produce incident reports, lessons learned, and corrective improvement actions. Delivery & Vendor Management • Deliver cybersecurity initiatives and projects within scope, timeline, and budget. • Manage MSSPs and security vendors from an operational and service delivery perspective. • Monitor SLA/KPI performance and ensure service effectiveness and value realization. Strategic Planning & Continuous Improvement • Define and maintain the cybersecurity technology roadmap aligned with business strategy. • Monitor emerging threats, vulnerabilities, and technology trends. • Drive continuous improvement in detection and response capabilities, automation and operational efficiency and cyber resilience and maturity • Support long-term planning, investment prioritization, and capability development. Education / Professional Qualification • Bachelor’s or master’s degree in Cybersecurity, Information Technology, Computer Science, or related field. • Cybersecurity certifications CISM, CRISC, CISSP, CCSK. Professional Experience • Minimum 10–12 years of experience in cybersecurity, including leadership, governance, and project delivery roles. • Knowledge of cybersecurity frameworks, standards, and regulatory requirements relevant to Malaysia (PDPA, Bank Negara, ISO 27001) and the plantation/industrial sector. • Proven experience in executive-level risk assessment, governance, and successful project delivery. • Strong coordination, stakeholder management, and decision-making skills. • Excellent analytical, problem-solving, and strategic thinking abilities. To apply, please submit your resume and cover letter outlining your interest for this role.