Manager, Digital Security & Governance

Add expected salary to your profile for insights

Mass Rapid Transit Corporation Sdn Bhd (MRT Corp) is looking for an enthusiastic and driven Manager, Digital Security & Governance to join MRT Corp in Kuala Lumpur. In this role, you will be responsible for defining, implementing, and continuously improving enterprise-wide cybersecurity requirements and governance. This role is responsible for leading and enabling risk-informed decision making for the overall cybersecurity landscape by utilising a risk-led and threat-informed approach. It is expected that all definitions and communication of cybersecurity governance across the enterprise should include timely management reports on security posture and controls applied.

Join us for an exciting opportunity to ignite your passion, broaden your expertise, and build a rewarding career! We are committed to supporting your growth and development. If you're ready to make a difference, apply now and share your resume.

Your Role:

Implementation of a cybersecurity framework in accordance with industry standards and best practices to ensure they are up to acceptable industry standards and reasonable assurance of security of the computing environment. This encompasses the entire enterprise ecosystem, which is made up of IT, OT, and IoT.

Manage and direct cybersecurity operations, including internal and external stakeholders. Produce and give cybersecurity governance reports as necessary.

Consistently monitoring and being aware of industry standard best practices, such as NIST, and conducting gap analysis on current governance are necessary.

Maintain and enforce IT-related corporate policies and SOPs to ensure proper governance and compliance.

Liaise with other departments such as risk management, quality management, administration, SHE and external parties such as external auditors, security solution providers and industry practitioners to carry out the relevant governance and security activities.

Develop soft skills and technical competencies required for team members for them to perform current tasks for sustainable capabilities and continuous improvement.

Manage periodic security activities such as awareness & training program and vulnerability management.

Provide consultancy or advisory services to other business units pertaining to IT governance, policy, standards, SOPs and security considerations when required.

Develop and maintain the DRP / BCP together with other relevant business units and coordinate the periodic testing in order to be prepared if actual recovery activities need to be carried out.

To support the implementation of the ABMS and comply with the requirements of anti-bribery controls implemented by MRT Corp as well as to refrain from getting involved in any corrupt practices.

Your Profile:

Previously held a role in cybersecurity with a proven track record in managing cyber risks and governance for IT, OT, and IoT infrastructure.

Bachelor's degree in IT, ICT, MIS, Computer Engineering or related fields with a minimum of 8 years of related work experience.

Having CISSP, CISA, or CISM certification is an added advantage, along with knowledge of relevant industry standards and frameworks such as NIST, CoBIT, ISO/IEC, 27k, and ITIL.

Proficiency in various security tools, systems, and technologies.

Experience in security operations and/or IT/OT/IoT infrastructure.

Excellent communication skills in writing and speaking, that can be understood by audiences with or without technical backgrounds.

Minimum CGPA 3.00 and above

Applicable to Malaysian citizens only

How do your skills match this job?

Your application will include the following questions:

• Which of the following statements best describes your right to work in Malaysia?
• What's your expected monthly basic salary?
• Which of the following types of qualifications do you have?
• How many years' experience do you have as a Digital Manager?
• How much notice are you required to give your current employer?
• What is your degree CGPA range?

MRT Corp was established in 2011 and is fully owned by the Minister of Finance (Incorporated). In 2017, MRT Corp successfully delivered the country’s first MRT line, MRT Kajang Line. This is followed by the MRT Putrajaya Line which was successfully delivered in 2023.

MRT Corp has also been appointed as the Malaysian InfraCo for the Rapid Transit System (RTS) Link Project between Johor Bahru and Singapore. The full opening of the line is targeted to be on 31 December 2026.

MRT Corp also plans and designs future metro rail networks and strive to be the catalyst in urban socio-economic regeneration by way of inclusive metro rail transport system and development of transit-oriented communities.