Security jobs in Malaysia

Job Title: Cybersecurity Lead Consultant (GRC, SOC & Offensive Security).

• We are seeking a senior Cybersecurity Lead Consultant with deep, hands‑on expertise across Cybersecurity Architecture, Governance Risk & Compliance (GRC), Security Operations (SOC), and Penetration Testing.
• This role combines technical depth, strategic advisory, and executive‑level communication, enabling the consultant to guide enterprise customers in defining, implementing, and maturing their cybersecurity programs.
• The ideal candidate is a trusted advisor to C‑suite and senior leadership, capable of articulating security trade‑offs, business risk, and ROI, while also laying the foundation and overseeing large‑scale security implementations.

• Act as a lead security advisor to enterprise customers, including CIO, CISO, CTO, and Risk Leaders.
• Define end‑to‑end cybersecurity strategies and roadmaps aligned to business goals, regulatory requirements, and risk appetite.
• Clearly articulate pros and cons of security architectures, tools, and operating models, enabling informed executive decisions.
• Translate technical security risks into business impact, financial exposure, and compliance implications.

• Lead GRC assessments, risk profiling, and compliance programs.
• Design and implement security governance frameworks aligned to ISO 27001, NIST, SOC 2, PCI‑DSS, GDPR, HIPAA, and regional regulations.
• Define policies, standards, controls, and risk treatment plans.
• Support audits, regulatory assessments, and executive risk reporting.

• Design and assess SOC operating models (in‑house, managed, hybrid).
• Oversee implementation and optimization of SIEM, SOAR, EDR/XDR, and threat intelligence platforms.
• Define incident response, detection, and escalation processes.
• Provide executive guidance during major security incidents and post‑incident reviews.

• Lead or oversee penetration testing, vulnerability assessments, red‑team exercises, and security testing programs.
• Review findings, prioritize remediation, and advise on risk‑based mitigation strategies.
• Ensure offensive security outcomes are translated into practical defensive improvements.

• Define enterprise security architectures covering cloud, application, network, identity, and data security.
• Oversee security implementation programs, ensuring design integrity, delivery quality, and risk reduction.
• Collaborate with delivery teams, partners, and vendors to ensure successful outcomes.
• Provide technical governance and quality assurance across security initiatives.

• Support pre‑sales, proposals, and solution shaping for strategic security engagements.
• Lead executive workshops, board‑level briefings, and security strategy sessions.

Build long‑term trusted relationships with customer stakeholders.

• 12+ years of progressive experience in cybersecurity, with significant technical expertise.
• Proven experience working with large enterprises or regulated industry customers.
• Demonstrated success engaging with executives and C‑suite leaders.
• Experience leading multi‑domain security programs across GRC, SOC, and offensive security.

• Cybersecurity architecture (cloud, on‑prem, hybrid)
• GRC frameworks and regulatory compliance
• SOC operations, incident response, and threat management
• Penetration testing and vulnerability management
• Familiarity with major security platforms and tools (SIEM, EDR/XDR, IAM, CSPM, DLP, SOAR)

• Exceptional ability to communicate complex security topics in business language.

Strong consulting mindset with stakeholder management and influence skills.

• Ability to challenge customer assumptions and guide risk‑based decision‑making.

Experience mentoring teams and providing technical leadership.

• CISSP, CISM, CISA, CRISC
• ISO 27001 Lead Implementer / Auditor
• CEH, OSCP, or equivalent offensive security certifications
• Cloud security certifications (AWS, Azure, or GCP Security)

cybersecurity, penetration testing, cybersecurity architecture, risk assessment