Job Title: SOC Manager
Location : Kuala Lumpur, Malaysia
#ECGS
EC-Council is the world’s largest cyber security technical certification body. We operate in 170 countries globally and we are the owner and developer of various world-famous cyber security programs. We are proud to have trained and certified over 400,000 information security professionals globally that have influenced the cyber security mindset of countless organizations worldwide.
Role Overview
SOC Manager is responsible for assessing information risk and facilitates remediation of identified vulnerabilities for IT & Cybersecurity risk across the enterprise. Management of IT security infrastructures, perform security vulnerability configuration management and work closely with Business Units (BU) to ensure Information Security policies are integrated with business processes. Candidate with experience in Cybersecurity Operations, Incident Management & Response and Project would be an advantage. This is a 3-year contract position, with the possibility of renewal or conversion subject to performance and business needs.
Key Responsibilities
- Oversee overall operation of Security Operation Centre (SOC) and Security BAU activities. Manage Security Incident Management Team to ensure proper co-ordination in the event of security threat outbreak, initiate remediation activities and work closely with IT security team on Security investigation/forensic analysis. Resolve potential security attempt and vulnerability issues timely.
- To perform security risk assessment and technical reviews on projects that involves transfer of confidential data or third party access to infrastructure. Regular meetings with Business Units/Clients/stakeholders to ensure all concerns or road block in business activities projects related Information Security are addressed.
- Proactively assess potential exposures of cyber threats and ensure adequate safeguards. Perform security vulnerability scan on network infrastructures to identify security weakness and work on the necessary remediation.
- Responsible for Cybersecurity incident response management and recovery process. Identifies and resolves potential security breaches and vulnerability issues in a timely and accurate method.
- Manage Information Security projects to comply with the Group and Regulatory requirements especially on work together with Risk Management and Compliance on the Bank Negara Malaysia (BNM) Risk Management in Technology (RMiT).
- Assess potential exposures to cyber threats arising from arrangements to ensure adequate safeguards and a defined process for reporting security incidents. Recommend improvements and upgrades to the security posture of the organization.
- Manage overall information security compliance including Threat Monitoring, Patch Management, Vulnerability Management, Antivirus Management, Hardening and identity management.
- Ensure risk control issues are updated in risk matrix & tracked. Ensure all audit findings are tracked, remediated & closed on timely manner. Coordinate with Security vendors/Group on management critical infrastructures: SOC, SIEM, WAF/firewall, proxy, etc. Conduct review on the configuration and rules settings for all security devices.
- Ensure that the Penetration Test being performed monthly and annually for systems. Perform annual user account recertification for all critical systems.
- Coordinate regular assessments of cloud infrastructure security posture and configurations to identify vulnerabilities and risks.
- Conduct IT Security Awareness Program and training to educate all employees.
- To assist any other related duties as may be assigned from time to time by the company.
Requirements and Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Experience in cybersecurity operations, incident management and response, and project management is an advantage.
- Hands-on incident response, investigation and forensic coordination.
- Managing security projects and working with vendors.
- SIEM, WAF, firewall, proxy and endpoint/antivirus management.
- Vulnerability management, patch management, system hardening and penetration testing oversight.
- Cloud security posture assessment.
- Identity and access management, including user account recertification.
- Threat monitoring and threat intelligence.
- Bank Negara Malaysia RMiT (Risk Management in Technology) compliance.
- Security risk assessment, risk matrix maintenance and audit finding tracking.
- Frameworks such as ISO 27001, NIST CSF and MITRE ATT&CK are commonly expected.
- Stakeholder communication with business units, clients and vendors.
- Decision-making under pressure during incidents.
- CISSP, CISM, CISA, CEH, GCIH, GCIA, or similar.
About Our Culture:
EC-Council is driven by a mission to strengthen global cybersecurity capability and advance the profession of ethical hacking and information security. Our teams operate across regions and cultures, united by integrity, professionalism, and a commitment to meaningful impact. Continuous learning and accountability are encouraged, empowering individuals to take ownership of their contributions. Respect, trust, and ethical conduct guide how we work with colleagues, partners, and the global cybersecurity community.
Additional Information:
EC-Council is an equal opportunity workplace and an affirmative action employer. We are committed to providing equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We do not discriminate based on these or any other characteristics protected by applicable laws or regulations in the locations where we operate.
EC-Council is dedicated to working with and providing reasonable accommodations to individuals with disabilities. If you have a medical condition or disability that limits your ability to complete any part of the application process and require reasonable accommodation, please contact us at
ecchr@eccouncil.org and let us know how we can assist.
To be eligible for this position, candidates must be able to provide proof that they are either a citizen of the country or have legal authorization to work in the country where the position is posted and are currently residing there. EC-Council does not offer employment to ineligible candidates and reserves the right to revoke employment in case the candidate loses the authorization to work.
If, as part of the recruitment process, you are required to complete or submit any form of work, project, case study, or assignment, please note that such material will be considered the exclusive property of EC-Council. By submitting such work, you acknowledge that EC-Council retains all rights, title, and interest in the submitted content, including any intellectual property contained therein.
Candidates further waive any intellectual property or moral rights in such submissions, confirm that the work is original and free of third-party infringement, and acknowledge that it is provided solely for evaluation purposes, with no ownership or other rights retained.
Our Privacy Policy outlines how we collect, use, store, and protect your personal data during the recruitment process. This may include information such as your name, contact details, employment history, qualifications, and any other details you provide as part of your application. All data is handled in compliance with applicable data protection and privacy regulations.
Submission of your application will be considered as your acceptance of the terms stated above.
