Job Roles:

• Answering inquiries through multiple channels and media venues while maintaining excellent customer service.

• Helping potential customers customize and configure computer system sales by providing upgrades and/or up-selling solutions that best fit the customer’s needs and ensures the order is completed.

• Maintaining follow-up and positive customer relations throughout the entire order and after-sales service processes.

• Problem Solving – Identifies and resolves problems in a timely manner; Gathers and analyzes information skillfully; Develops alternative solutions; Works well in group problem solving situations.

• Technical Skills – Assesses own strengths and weaknesses; Pursues training and development opportunities; Strives to continuously build knowledge and skills; Shares expertise with others.

• Customer Service – Manages difficult or emotional customer situations; Responds promptly to customer needs; Solicits customer feedback to improve service; Responds to requests for service and assistance; Meets commitments.

Job Requirements:

• Friendly, talk active and outgoing person.

• Good communication skill.

• Proficient Typing skills

• Able to communicate in English and Bahasa Malaysia.

• Accountability – Holds self accountable; Invests in own education, development, and personal motivation and holds self to performance standards.

• Excel under pressure

• Fresh graduates are welcomed!

Perks & Benefits

• Personal leave
• Personal development opportunities

Are you passionate about offensive security, enjoy breaking down walls with an array of tools and techniques, and continuously learning about the offensive security world? We are seeking a dynamic Cyber & Offensive Security Risk Lead to join our Data, Technology & Cyber Risk function.

Job Description:

The Cyber & Offensive Security Risk Lead will assist the Chief Information Security Officer to establish and maintain robust governance and oversight over the effectiveness of cyber risk management to ensure that the Bank’s technology and information assets are adequately protected.

Primary Responsibilities:

• Assist with the development, review, update and/or roll-out of cyber risk-related framework, policy, and initiatives to facilitate effective risk management and governance over cyber risk management.
• Review and assess the extent of compliance with internal policies, procedures, standards and regulatory requirements.
• Provide advisory, guidance and challenge to Business Units and Functional Units in their management of cyber risks to achieve their business objectives and within the Bank’s risk appetite.
• Conduct independent assessments on the adequacy and effectiveness of control measures implemented by the 1st Line of Defense (FLOD), and recommend mitigation actions to address vulnerabilities, if any.
• Lead Red Team (offensive cyber) activities to proactively simulate real-world cyber-attacks on the Bank’s security controls to identify and exploit security weaknesses and vulnerabilities.
• Provide recommendations and remediation strategies to address security vulnerabilities identified during offensive cyber activities.
• Establish relevant Key Risk Indicators (KRIs) and metrics to monitor and measure cyber risk exposures.
• Prepare and present cyber risk reports to Senior Management and relevant committees, highlighting key findings, trends and/or recommendations.
• Respond to enquiries and audits (i.e. internal, external and regulatory) pertaining to cyber risks.
• Where required, collaborate with the Bank’s cyber incident response team to provide advice and/or support during security incidents and cyber-attacks.
• Conduct cyber risk awareness training across the Bank, fostering cyber risk awareness and a security-conscious culture.
• Stay abreast of emerging cyber threats, vulnerabilities, attack techniques, and regulatory developments to proactively address potential cyber risks, and assist the Management (and/or Board) understand potential concerns or risks that might impact the Bank.

Qualifications:

• Bachelor’s degree in computer science, Information Security or a related field.
• Minimum of 15 years’ experience in any of these disciplines: offensive security, information security, risk management or compliance in related areas.
• Professional certification such as CISSP, CCSP, CGRC, CISM, CISA, CRISC, CompTIA PenTest+, Offensive Security (e.g. OSCP, OSCE, OSWE & OSWP), SANS (e.g. GXPN, GWAPT, GPEN & GMOB), Zero-Point Security and/or CREST would be advantageous.
• Sound knowledge in regulatory requirements around technology risk and cyber resilience.
• Knowledge of network protocols, operating systems, application security and cloud security.
• Possess strong verbal and written communication skills, and capable of engaging senior stakeholders.
• Clear analytical thought process and good understanding of emerging technological developments and risk management frameworks.

Perks & Benefits

• Allowance (transportation, parking etc.)
• Nearby public transport
• Smart casual dress code
• Medical insurance
• Annual leave, Birthday Leave etc

責任

✍ 負責與網路安全要求和新興相關ICT技術相關的端到端整體解決方案和服務活動，以實現最佳水準的網路安全機密性、完整性和可用性標準。
✍ 負責網路安全指南、基準、標準和流程的持續維護、監控和更新。這包括預測成長以確保可擴展性，評估基準、觀察或其他行業最佳實踐帶來的增強價值，並在需要時納入變更。
✍ 負責建立和維護業務工作流程和技術的現況和未來安全流程和工作指導。
✍ 開發並推薦知識開發以及文件化實務和工程知識抵押品的創建。
✍ 技術專家提供全面的解決方案和工程，以建構技術解決方案的技術要求。
✍ 提供IT 解決方案工程和設計建議的IT 安全諮詢和審查服務，以確保解決方案符合IT 安全要求，從而保護客戶的IT 基礎設施和系統。
✍ 提供適用於各種開發技術的技術專業知識和諮詢。
✍ 負責為客戶的整個網路和系統基礎設施分析、評估和推薦最佳的資訊安全技術和解決方案。
✍ 負責從安全角度和角度進行符合客戶安全控制和基線的解決方案評估、POC、UAT。
✍ 就資訊安全問題提供建議和諮詢，並為各個內部團隊和部門提供建議。
✍ 對新出現的內部和外部威脅、技術趨勢和減輕 IT 安全風險的方向進行研究和環境掃描，並透過跨 IT 部門和職能部門的協作進行評估，以改善 IT 安全基礎設施和服務。
✍ 規劃、研究、分析、評估和推薦資訊安全技術解決方案、方向和採用。
✍ 研究和開發新的資訊安全技術以改善和創造商業機會。
✍ 與外部 IT 安全專家和其他 IT 組織建立和維護策略關係/網路和協作，以衡量和改善客戶向利害關係人提供的網路安全基礎設施服務。

要求

✍ 電腦科學、資訊系統、工程學、軟體工程或任何相關學科的學士學位。
✍ 在技術相關領域擁有約 8-10 年的經驗，並具有相關 IT 安全領域和工程的具體專業知識。
✍ 具有撰寫和支援策略性商業策略的經驗，並具有以業務為中心的心態。
✍ 清楚地了解如何根據特定的架構原則將安全架構和設計轉化為詳細的技術組件。
✍ 此角色需要掌握安全工程生命週期並了解企業安全架構環境。
✍ 網路安全治理、指南和風險以及網路安全解決方案領域的基礎知識。
✍ IT 網路的基礎知識以及對 OT 和物聯網架構和工程的更好理解。
✍ 具有強化練習和技術合規性保證練習的經驗。

工作亮點

✅ 僅限馬來西亞本地人。
✅ 每週工作 5 天，採用混合工作安排。
✅ 極佳的成長和職涯發展機會。
✅ 有競爭力的薪資待遇。
✅ 偉大的跨國公司（能源部門）工作文化。

About the role:

As a Senior Security Analyst at Ezypay, you directly contribute to and shape Australia’s leading recurring payments and subscription billing API. The product supports the definition of payment plans and collections using multiple payment methods.

As a Senior Security Analyst with Ezypay, you will:

• Maintain PCI Compliance: Ensure that all systems and processes comply with the Payment Card Industry Data Security Standard (PCI DSS).
• Security Monitoring: Continuously monitor network traffic and system logs for unusual activity, potential threats, and vulnerabilities.
• Vulnerability Assessments: Conduct regular vulnerability assessments to identify and mitigate security risks within the organization’s systems and infrastructure.
• Penetration Testing Support: Collaborate with and support external partners who perform penetration testing, ensuring they have the necessary access and information.
• Policy Development: Develop and enforce security policies and procedures to ensure compliance with PCI DSS and other relevant regulations.
• Security Awareness Training: Educate engineers on security best practices and PCI compliance requirements.
• Blue Team Activities: Participate in blue team exercises to improve the organization’s defensive capabilities against cyber threats.

• 5+ years in a similar role
• Bachelor’s Degree in Computer Science, Software Engineering or relevant Information technology industry experience.
• Experienced in PCI or ISO 27001
• Understanding of security best practices (software and systems)
• Linux administration experience on cloud infrastructure
• Good understanding of software and systems architecture
• Experience programming in at least one compiled or interpreted language (Java, .Net, Python, Bash, Powershell etc.)

• Competitive salary package & performance bonus
• Gym subsidies 
• Casual dress code 

• Flexible working arrangements  (including work from home and remote) 
• Generous number of Annual Leaves
• Extensive medical coverage (including dental & optical)
• Delicious office snacks 
• Guidance and mentoring from leaders within the business 
• Dynamic, positive work environment 
• Fantastic team culture  

To support and contribute to the delivery and growth of Control Risks’ Security Design Practice across Asia Pacific (APAC), The role will involve working on various security design-led projects across the region by providing support to Control Risks’ design team with the design deliverables.

Responsibilities:

• Contribute to identifying new opportunities, developing proposals and presenting to prospective clients and stakeholders
• Develop project plans, travel to client sites, offices where appropriate.
• Attend weekly meetings with the project stakeholders, be very attentive to details and minutes all actions that are related to our discipline
• Deliver security design consultancy assignments ranging from simple to complex tasks
• Drafting design stage documents such as technical specification documents, power loads calculation, tender evaluation reports, etc.
• Keep abreast with advances in security technology
• Complete assigned tasks within the given time frames
• Attend onsite inspections and testing & commissioning

• Minimum of five (5) years’ experience as a security design professional, or in a related field
• Capable of working with CAD 2D to a level that can deliver design layouts that match our internal standards
• A sound understanding of the design engineering elements
• Proven track record of successful security design consultancy projects, preferably within Asia or similar environment.
• A good understanding of all project design stages referred to as RIBA design stages, such as Conceptual Design, Developed Design, Technical Design, etc.
• Good knowledge and experience in design and implementation of integrated electronic security systems and physical security measures such as:

1. Video surveillance systems.
2. Access control systems.
3. Intruder detection systems.
4. Intercommunications systems.
5. Security fences, gates, barriers, locking systems, secure rooms.

• Working knowledge in the design of local security equipment rooms, main security equipment rooms and control room
• A good understanding on how to build a dedicated secure security network with considerations on network bandwidth and cybersecurity requirements
• Good knowledge and understanding of the well-known security management systems (i.e., Genetec, Gallagher and the likes)
• Experience working in multi-disciplinary teams
• Demonstrable experience in applying risk management methodology such as (ISO 22301, ISO31000, SOC 2, ISO 27001, etc.)

Qualifications and specialist skills

Essential

• An Engineering degree in electronics and electrical engineering / communications is preferred
• Strong communication skills – written and oral (informal and presentation to board level)
• Good skills in working with project management tools (i.e. Microsoft project or Primavera)
• Strong commercial expertise, analytical (financial management, legal and contractual skills), leadership
• Good client (internal and external) management and consulting skills
• Effective decision making and judgement
• Excellent planning and organizational skills
• Assertiveness and drive with strong influencing skills
• Strong interpersonal skills-building trust and rapport
• Excellent communication skills – written and oral (informal and presentation)
• IT literacy – MS office packages, advanced Excel

Job Description:

• Assist in monitoring, analyzing, and securing network systems to identify and mitigate potential threats.
• Collaborate with the IT team to configure and maintain network devices, including routers, switches, and firewalls.
• Support the implementation of security measures, such as intrusion detection systems (IDS) and endpoint protection solutions.
• Participate in vulnerability assessments, security audits, and risk analyses to ensure compliance with organizational policies.
• Assist in the development and maintenance of security documentation, including policies, procedures, and user guides.
• Investigate and respond to security incidents, providing detailed analysis and recommendations for improvement.
• Contribute to the setup and maintenance of virtual private networks (VPNs) and access control mechanisms.
• Research and stay updated on emerging cybersecurity trends, threats, and best practices.
• Provide technical support for network and security-related issues, ensuring prompt resolution.

Job Requirement:

• Currently pursuing a Bachelor’s degree in Network & Computer Engineering, Cybersecurity, Information Technology, or a related field.
• Minimum CGPA of 3.30 or equivalent academic performance.
• Final-year students or those available for a 5-6 month internship program.
• Understanding and practical knowledge of networking systems such as LAN, Wireless, and Firewalls.
• Basic understanding of networking protocols (e.g., TCP/IP, DNS, DHCP) and information security concepts.
• Familiarity with firewall configurations, intrusion detection/prevention systems (IDS/IPS), and VPN technologies is a plus.
• Eagerness to learn and stay updated on the latest trends in network and cybersecurity.

Job Brief:

Join our dynamic team as a Cloud Security and Infrastructure Intern, where you’ll be involved in hands-on tasks to strengthen our cybersecurity and infrastructure systems. You'll gain real-world experience working with cutting-edge security technologies and network management.

Job Responsibilities:

Security:

• Monitor and manage security appliances like XDR, WAF, and DLP.
• Assist in managing firewalls and security configurations.
• Collaborate with external security operations teams to address cybersecurity issues and potential threats.
• Assist in penetration testing and security findings for applications and servers.
• Engage with end users to resolve SOC findings.

Network/Server:

• Support the management of LINUX and Windows servers.
• Assist with Privilege Access Management (PAM).
• Monitor and maintain LAN/WAN systems and wireless networks.
• Ensure server and system backups are completed and monitored effectively.

Infrastructure:

• Help set up user work emails and Microsoft accounts.
• Troubleshoot user issues related to networks and software.
• Provide technical support for hardware and software issues.

Job Requirements:

• Passionate about cybersecurity and network infrastructure.
• Studying or have basic knowledge in IT, Computer Science, or related fields.
• Eager to learn, proactive, and a good team player.

Diversity & Inclusion Commitment

The Company is committed to providing equal employment to all individuals regardless of their race, colour, religion, gender, sexual orientation, gender identity, national origin, age, disability, marital status or any other characteristic protected by applicable laws. 

We try make sure everyone has a fair chance to work with us, no matter where they’re from or who they are. We believe having different kinds of people on our team makes us better and more creative. Our friendly environment is all about treating every person with respect and making sure everyone’s ideas count. We want people from all all walks of life to apply and be part of our mission to create a place where everyone is welcome and valued.

The Cloud Network and Cyber Security Engineer will report to and assist the VP of IT Infrastructure and Security and will be responsible for designing, implementing, and maintaining secure and scalable cloud and on-premise network architectures. As part of the Infrastructure and Security team, this role will help lead cyber security efforts, securing our sensitive data and critical assets from current and emerging threats, and be the primary technical contact for all information security tooling, security risk and incident mitigation efforts, and documentation in our APAC region. This role will also work closely with the Lead Cyber Security Engineer and cross-functional teams to ensure that our organization’s systems are compliant with industry best practices and regulatory standards.

The Cloud Network and Cyber Security Engineer will provide security and configuration expertise and will work with functional leaders on broad technical initiatives around design, implementation, rollout, and monitoring of cloud enterprise systems in support of Keypath’s global cyber security and cloud roadmap. The Cloud and Network Cyber Security Engineer will also provide mentoring of System Administrators in security-related topics.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Design and implement scalable and resilient cloud network architectures across multiple cloud platforms (e.g., Azure, AWS) to support our business operations.
• Ensure high availability, performance, and reliability of cloud-based networks by implementing redundancy, load balancing, and fault-tolerant configurations.
• Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable timely remediation. • Collect intrusion artifacts (e.g., source code, malware, Trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
• Collaborate with cross-functional teams to gather requirements and design network solutions that meet business needs.
• Partner with leadership to educate staff in security best practices and requirements laid out in company security and technology policies and standards.
• Enforce policies, procedures, and security controls to ensure compliance with all applicable laws, regulations, and standards, such as SOC 2 and ISO 27001.
• Monitor and report on the effectiveness of the information security and compliance program, providing regular updates to senior management and relevant stakeholders.
• Participate in BC/DR and incident response tabletop exercises.
• In conjunction with 3rd party gap assessments, identify and recommend mitigation for security gaps in existing and proposed architectures.
• Other duties as assigned.