Example Company
Software engineer
- Location
- San Francisco
- Type
- Full time
- Compensation
- $150k-$200k
- Posted
- 2 days ago
Join a team building useful software. Work closely with engineering and design to turn new ideas into products.
Loading job details
Manager - IT Security
- Location
- Kuala Lumpur
- Posted
- 18D AGO
About the role
About the Job
The Manager, Infrastructure Security is responsible for strengthening the organisation’s infrastructure security posture. This individual contributor role focuses on promoting cybersecurity best practices, managing security exceptional requests, periodically reviewing the operational efficiency of infrastructure security controls, and ensuring timely reporting of IT security performance metrics.
Responsible for leading the review of firewall requests and the continuous optimization of firewall rules. Coordinate and conduct periodic firewall rule reviews to identify and remediate obsolete, unused, redundant, or high-risk rules, ensuring alignment with organizational security policies, regulatory requirements, and industry best practices.
Responsible for conducting system hardening review and assessments across enterprise platforms and environments in accordance with organizational security standards to minimize risks, maintain compliance, and support a robust and resilient infrastructure environment. Review and evaluate exception requests where deviations from established hardening baselines are required.
Conduct periodic and ad hoc vulnerability assessments across the organization’s infrastructure to proactively identify, assess, and mitigate security risks. Ensure timely reporting, tracking, and remediation of identified vulnerabilities in alignment with organizational security standards.
Monitor cloud environments to identify, track, and report misconfigurations, policy violations, and non-compliant resources using appropriate tools. Ensure cloud configurations remain aligned with organizational security policies and best practices.
Supports Third-Party Review Committee in conducting security assessments prior to vendor onboarding. Ensure appropriate security controls are evaluated and facilitate secure data handling practices, including proper data retention and deletion during offboarding.
Maintain, and periodically review infrastructure security documentation, including standards, procedures, and guidelines, ensuring the documentation aligns with regulatory requirements, organisational policies, and industry best practices.
Perform regular reviews to ensure antivirus signatures are consistently updated across all endpoints and servers, maintaining compliance with MAS Cyber Hygiene Notice and organisational security standards.
Conduct and facilitate the annual attestation process for standalone devices to ensure the adherence to the required security controls.
We are looking for people who
Degree/Diploma in Information Security, Computer Science, or related field.
2 to 4 years of working experience in infrastructure or information security.
Good understanding of DLP technologies, security awareness programmes, infrastructure security controls and best practices.
Familiar with compute infrastructure, network infrastructure, and infrastructure security solutions – including implementation and management.
Certifications such as CISSP, CISM, and CCSP are preferred.
Great Eastern does not accept unsolicited agency resumes. Please do not forward resumes to our email or our employees. We will not be responsible for any fees related to unsolicited resumes.
Similar roles
Security Operations & Detection Engineer (SecOps) – AI CloudBitdeer · Los Angeles · San Jose
Senior IAM & Information Security EngineerCaris Life Sciences
Senior Penetration TesterWestpac Group · Sydney
Security Operations EngineerTrueCommerce
Investigations Manager - Global Security1X
Security & Trust AnalystTypeSafe AI · San Francisco