Vp of IT Security

Job Information

Job Opening ID
- ZR_1170_JOB

Industry
- Cyber Security & IT

City
- Cyberjaya

Country
- Malaysia
- VP of IT Security wanted for hazardous journey Do you recognise this phrase? Ernest Shackleton used it on the 29th of December 1913 in his now famous job ad. That’s also what we have to offer: the incredible challenge of keeping the IT of a rapidly growing and very successful company highly secure._

**intimately** familiar with cloud technologies, coding, offensive and defensive security and security awareness.

Before you apply, we want to make one thing very clear.
_This job is not about writing documents._ Although we expect you to be very familiar with all the acronyms, you will spend a lot of time standing in the trenches with your global team of security engineers, researchers and analysts, knee-deep in reality, finding and fixing our pain points. After all, the proof of the pudding is in the eating

**What will you be doing?**
- Manage (and expand) a global team of approximately 25 security engineers, researchers, analysts and awareness specialists in all aspects. Note the word global.
- Achieve and maintain level 4 in both the security maturity model and the security awareness maturity model. Think of incredibly cool projects and devious security awareness exercises
- Work very closely with your counterparts in IT Administration, Disaster Recovery, IAM, DevOps, WinOps and IT Development to ensure that IT Security becomes part of the DNA of everything we do.
- Over-communicate the need for security at every opportunity

**Requirements**:

- 15+ years of leadership experience running security programs and teams in a mid-to-large-sized company. We expect you to be tried and tested with the battle scars to prove it.
- Extensive hands-on experience with cloud infrastructure, automation, containerization, DevSecOps, virtualization, etc.
- Real-world experience with penetration testing (white box, black box, and grey box). Ideally, you have been a bug bounty hunter in a past life.
- You can hold your ground during code reviews, and you are very familiar with secure coding practices. Also, you do not shy away from command line interfaces
- Broad knowledge about social engineering threats and tests (phishing attacks, tailgating, dumpster diving, endpoint security, etc.)
- Exposure to compliance and regulatory frameworks (e.g. SOX, NIST, ISO 27001, PCI DSS)
- Excellent written and spoken English communication skills

**Benefits**:

- The best workplace you can possibly imagine: a gorgeous 5-storey building including a rooftop garden, a gym, squash court, yoga room, barbecue pit, jam studio, and a lot more
- Super dynamic work environment, rife with tough challenges and great career opportunities
- A chance to work with top talent from across the globe (55+ nationalities)
- Ample team-building and bonding activities
- Great overseas travel opportunities
- Competitive salary, annual performance bonus, and retirement plan
- A range of health benefits
- Casual dress code