{"id":3386932,"url":"https://alion.io/job/air-liquide-information-security-specialist","title":"Information Security Specialist","company":{"id":8072,"name":"Air Liquide","domain":"airliquide.com","url":"https://alion.io/company/airliquide","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":190,"ghost_share":0,"stale_share":0.658,"repost_share":0.021,"time_to_fill_p50_days":44,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":42000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-28T08:04:38Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-05T06:35:05Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"ALBS is an Air Liquide entity in Kuala Lumpur, regrouping for the APAC scope its Business Service Centers (Kuala Lumpur and Shanghai) as well as the two Global Functions (IT, Digital and Procurement). Designed to derive optimal value by better leveraging technology, people and competencies, the ultimate goal is to boost efficiency and deliver outstanding and sustainable performance while keeping a strong focus on customer centricity. This Organization is striving for excellence, adopting the Best in Class models to deliver value through simplification and standardization of processes, while adhering to Internal controls and compliance requirements.\nEntity and activity descriptionAir Liquide IT: The Group launched an overhaul of its IT services, to simultaneously improve and world security, competitiveness and agility. This results in a changing IT organizations with infrastructure services and IT production which will now be managed globally by a central department called GIO (Global Infrastructure Operations) and business applications that will be supported by dedicated departments, called BIS (Business Information Systems) for each business line and relevant geographies.\nHow will you CONTRIBUTE and GROW?\nHow will you CONTRIBUTE and GROW?\n1. Application Security, Architecture Review & Risk Analysis\nArchitecture & Design Reviews: Evaluate application architectures and cloud/on-premise deployment patterns against enterprise security standards to ensure alignment with Security & Privacy by Design principles.\nThreat Gap Identification: Conduct threat modeling and risk assessments to identify technical vulnerabilities, architectural flaws, and control gaps early in the application lifecycle.\nRisk Assessment & Impact Analysis: Quantify and document technical, operational, and business risks associated with system changes, third-party integrations, and new technology deployments.\n2. Risk Exception Management & Policy Governance\n Risk Exception Processing: Review, evaluate, and track Digital Security Policy exception requests (DTAP/policy waivers), ensuring business justifications are valid and compensating controls are properly established.\nCompensating Controls Validation: Collaborate with engineering and operations teams to define, validate, and monitor effective compensating controls for accepted risks and policy deviations.\nRisk Mapping & Register Maintenance: Feed risk analysis findings and approved risk exceptions into the enterprise D&IT risk register, ensuring visibility and periodic re-evaluation.\n3. Vulnerability & Compliance Management (Cyber Ops)\n Vulnerability Scanning & Remediation: Execute continuous vulnerability assessments across IT/OT networks and applications using enterprise tools (e.g., Qualys, PRISMA Cloud).\nPenetration Test Follow-Up: Track remediation of findings from IT/OT penetration tests, perform re-testing validation, and support ad-hoc testing requirements.\n Operational Security Requests: Manage and triage incoming requests from the centralized security mailbox, along with ad-hoc tickets (e.g., firewall rule changes, proxy whitelisting, YourWay requests).\n4. Security Operations & Governance Support\nThreat Intelligence Execution: Process and execute follow-up actions on cyber threat intelligence reports issued by the CSIRT.\n IAM & Access Control Reviews: Coordinate annual Identity and Access Management (IAM) access reviews for both standard users and High Privilege Accounts (HPA).\nMetrics & Reporting: Maintain security dashboards, track CMDB asset governance, and produce security reporting for leadership.\nAre you a MATCH?\nQualifications & Candidate Requirements:\nEducation & Experience\n Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (or equivalent practical experience).\nExperience: 5+ years of hands-on experience in information security, risk management, vulnerability management, or security incident handling across both IT and OT (Operational Technology) environments.\nVulnerability Management & Penetration Testing Coordination\n Vulnerability Assessment & Governance: Demonstrated expertise in running enterprise-wide vulnerability management programs (using tools such as Qualys, PRISMA Cloud, etc.), including scanning, prioritization, triage, and SLA enforcement across IT/OT infrastructure.\nPenetration Test Follow-up & Remediation: Proven experience coordinating third-party and internal penetration testing engagements. This includes analyzing findings, leading remediation workflows with infrastructure/application teams, facilitating re-testing, and conducting ad-hoc security validations.\nSecurity Architecture & Risk Management\nApplication Architecture & Threat Modeling: Deep understanding of secure application architecture, cloud-first patterns, threat modeling, and identifying structural threat gaps during design reviews.\n Access Control & Identity Architecture: Strong technical command of identity and access governance, including Role-Based Access Control (RBAC), Tiered Access Models, and Privileged Access Management (PAM/HPA).\n Risk Assessment & Exception Handling: Hands-on experience performing technical risk analyses, evaluating compensating controls, and managing formal digital security policy exception workflows (DTAP/waivers).\nCommunication & Certifications\nCommunication: Exceptional written and verbal communication skills, with a track record of producing clear technical risk reports, executive dashboards, and policy documentation.\n Certifications (preferably ): Professional certifications such as CISSP, CISA, CRISC or CISM\nOther Information:\nOffice Location: Level 17, 1Powerhouse\nAccessible via MRT & LRT 3 (Bandar Utama station)\nAbout Air Liquide\nA world leader in gases, technologies and services for Industry and Health, Air Liquide is present in 78 countries with approximately 64,500 employees and serves more than 3.8 million customers and patients. Oxygen, nitrogen and hydrogen are essential small molecules for life, matter and energy. They embody Air Liquide’s scientific territory and have been at the core of the company’s activities since its creation in 1902.\nOur Differences make our Performance\nAt Air Liquide, we are committed to build a diverse and inclusive workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world.\nWe welcome and consider applications from all qualified applicants, regardless of their background. We strongly believe a diverse organization opens up opportunities for people to express their talent, both individually and collectively and it helps foster our ability to innovate by living our fundamentals, acting for our success and creating an engaging environment in a changing world.","description_format":"text","description_chars":6812,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Hydrogen Energy","Chemical Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-28T08:04:38Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":7,"expected_fill_days":44,"reasons":["conf:5","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/air-liquide-information-security-specialist","json_url":"https://alion.io/job/air-liquide-information-security-specialist.json","meta":{"generated_at":"2026-11-05T12:05:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15528,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8072},"rest":"https://alion.io/mcp/rest/get_company?id=8072"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fair-liquide-information-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fair-liquide-information-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fair-liquide-information-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/air-liquide-information-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fair-liquide-information-security-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3386932}},{"tool":"search_jobs","arguments":{"company":"airliquide.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3386932},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}