AVP, Cybersecurity
- Mutiara Damansara, Selangor
- Permanent
- Full-time
- Provide strategic leadership and direction for the cybersecurity function, aligning with CARSOME's overall business objectives and risk appetite.
- Develop and implement a comprehensive cybersecurity program based, to drive growth in the maturity of CARSOME's cybersecurity posture.
- Establish and maintain a structured governance framework aligned with ISO 27001.
- Oversee the development and enforcement of security policies, risk assessments, and compliance monitoring.
- Ensure continuous security monitoring and reporting to Exco for improved oversight.
- Establish a formal risk treatment plan and risk acceptance criteria.
- Lead internal policy enforcement, risk register management, audit liaison, and vendor risk review.
- Oversee security operations and information security incident response, ensuring timely detection, analysis, and remediation of security incidents.
- Ensure timely and review of threat intel supplied by SIEM monitoring, MSOC and other relevant sources.
- Drive outcomes from managed services, such as Managed SOC, DFIR, and VAPT, to triage alerts and defend audit controls.
- Lead the implementation of cloud-native security tooling and drive CI/CD pipeline hardening in partnership with Engineering & DevOps teams.
- Ensure the security of cloud workloads and infrastructure during the AWS-to-GCP migration.
- Oversee the integration of SAST, DAST, and SCA security testing tools into CI/CD pipelines.
- Consolidate Application Security (AppSec) and Product Security (ProdSec) into a unified Product Security function.
- Lead and manage a team of security engineers and analysts, providing guidance, mentorship, and professional development opportunities.
- Foster a security-first mindset and promote security awareness across the organization.
- Collaborate with Engineering, DevOps, Product, Legal, IT, and Business Operations teams to prioritize security across all functions.
- Communicate effectively with leadership and stakeholders on the status of the cybersecurity program, risks, and mitigation strategies.
- Manage the cybersecurity budget, ensuring efficient allocation of resources to support key initiatives.
- Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.
- Minimum of 10 years of experience in cybersecurity, with at least 5 years in a leadership role.
- Strong understanding of cybersecurity frameworks, such as ISO 27001, NIST, and SOX.
- Experience with cloud security, DevSecOps, and incident response.
- Excellent leadership, communication, and interpersonal skills.
- Must demonstrate the ability to translate strategy into execution through verifiable
- examples of past security program implementations, not just theoretical knowledge.