{"id":1246476,"url":"https://alion.io/job/the-hoffman-agency-apac-it-manager-cybersecurity","title":"APAC IT Manager (Cybersecurity)","company":{"id":455184,"name":"The Hoffman Agency","domain":"hoffman.com","url":"https://alion.io/company/the-hoffman-agency","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":48000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":679},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"Sophos","optional":false}],"status":"live","first_seen_at":"2026-09-25T17:22:53Z","employer_posted_date":null,"last_verified_at":"2026-09-25T17:22:53Z","board_verified":false,"closed_at":null,"days_open":24,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":24},"description":"You have a passion to lead\n\nYour drive to inspire and guide sets you apart. You thrive on taking responsibility, tackling challenges head-on, and turning obstacles into opportunities. Working closely with a diverse, talented team to deliver innovative solutions energizes you, and you find genuine satisfaction in helping clients achieve their goals.  \n\nWe're in search of dynamic IT talent who not only excel in a fast-paced, collaborative environment but also bring creativity, strategic insight, and a good sense of humour to every challenge. If you're ready to empower internal clients, and drive transformative change, we want to hear from you!  \n\nIf you like where this story is leading, read on.\n\nThe Plot Thickens: Job Description\n\nSecurity governance and policy management: You will own the lifecycle of our security documentation—regularly reviewing and updating the IT Security Policy, Security Incident Response Procedures, Business Continuity Plan (BCP), Disaster Recovery Plan (DRP), AI Policy oversight, and related documents. You will ensure these frameworks remain current, aligned with evolving threats, and compliant with industry standards and regional regulations such as PDPA and related privacy laws. You will also be responsible for the maintenance, upkeep, and upgrades of security systems, including Microsoft Defender, Sophos, BitLocker, and Microsoft Intune.\nCompliance and certifications: You will lead the effort in obtaining and maintaining security-related certifications (e.g., ISO 27001, SOC 2, Cyber Essentials) that strengthen our credibility with clients and partners. This includes coordinating with external auditors, preparing documentation, and driving remediation of any gaps identified during the certification process.\nClient security questionnaires and RFP responses: You will serve as the go-to person for responding to client security questionnaires, RFPs, and due diligence requests. By researching and recommending cost-effective security tools and controls, you will ensure our environment meets the requirements our clients expect—without overengineering solutions.\nRisk assessment and audit: You will initiate and manage annual information security risk assessments, identifying vulnerabilities across our Microsoft 365 environment, endpoint infrastructure, and third-party integrations. You will coordinate internal and external audits, track findings, and drive remediation plans through to completion.\nSecurity awareness training: You will design, develop, and deliver an annual security awareness training programme for all staff, including on our learning platform – HAcademy. From phishing simulations to policy refreshers, you will foster a security-conscious culture that empowers every team member to be a line of defence.\nVulnerability monitoring and incident response: You will continuously monitor security vulnerability alerts from sources such as vendor advisories, threat intelligence feeds, and our endpoint protection tools. When threats emerge, you will assess their impact, coordinate with the IT team to apply patches or mitigations and escalate per the Incident Response Procedures when necessary.\nSecurity tooling, vendor evaluation, and cybersecurity management: You will research, evaluate, and recommend cost-effective security solutions that address gaps in our environment while meeting client and regulatory requirements. This includes managing cybersecurity vendors and overseeing the integration of security tools into the broader IT ecosystem. You will also contribute to procurement decisions in collaboration with the Regional IT Director and maintain strong vendor relationships to ensure optimal performance and value.\nIT support and infrastructure backup: While your primary focus is cybersecurity, you will also serve as a backup for IT support and infrastructure functions. This includes assisting with endpoint troubleshooting, user support escalations, Microsoft 365 administration, and infrastructure tasks during peak periods or when colleagues are unavailable.\nHosting of company website and related resources: You act as both a trainer and advisor to the wider IT team, providing guidance on cybersecurity best practices and key security considerations. In addition, you provide ad hoc support across end-user support and infrastructure needs, stepping in as required to ensure smooth and reliable IT operations.\n\nAttributes of the Protagonist (That's You)\n\nDetail-oriented and methodical in approach\nTeam player – your success is my success!\nOwnership mindset and accountability\nProactive and vigilant – you spot risks before they become incidents\nPassionate about cybersecurity and continuous learning\nStrong communicator who can translate technical concepts for non-technical audiences\nResourceful problem-solver with a cost-conscious mindset\nAdaptable and willing to step outside your core function when the team needs you\n\nThe Hero's Background: Qualifications\n\nBachelor's degree or above in Information Security, Computer Science, Information Technology, or a related field from a reputable university\nAt least 4 years of experience in IT security, cybersecurity governance, or a related information security role\nSolid understanding of security frameworks and standards (e.g., ISO 27001, NIST CSF, CIS Controls)\nExperience conducting risk assessments, security audits, and compliance gap analyses\nFamiliarity with Microsoft 365 security and compliance tools (Microsoft Defender for Office 365, Azure AD / Entra ID, Intune)\nExperience responding to client security questionnaires and RFPs in a professional services or agency context\nKnowledge of endpoint protection solutions and vulnerability management practices\nUnderstanding of data protection regulations across key operating regions (e.g., GPDR, CCPA, PDPA Singapore, China PIPL, etc.)\nStrong documentation and communication skills in English; proficiency in another language such as Chinese would be an advantage due to support of users in China\nRelevant certifications are a plus: CISSP, CISM, CompTIA Security+, ISO 27001 Lead Implementer/Auditor, or equivalent\n\nCome join us and be at the forefront of marketing and communications, and work with industry-leading tech brands. We value diverse thinking, inclusion in decision making and embrace ideas that push the boundaries.\n\nWe welcome applications from candidates based in Malaysia, with preference given to those who have existing rights to work in country. Should you have any reasonable accommodations, please feel free to indicate in your application to us.\n\nA competitive salary, benefits package and career advancement opportunities will be offered to the successful candidate. We also offer our staff a four-week sabbatical after four years.\n\nWe will contact all shortlisted candidates from [HIDDEN TEXT] (our HR system).","description_format":"text","description_chars":6844,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"China","iso":"CN","kind":"region"},{"name":"India","iso":"IN","kind":"region"},{"name":"Japan","iso":"JP","kind":"region"},{"name":"Australia","iso":"AU","kind":"region"},{"name":"Indonesia","iso":"ID","kind":"region"},{"name":"Malaysia","iso":"MY","kind":"country"},{"name":"New Zealand","iso":"NZ","kind":"region"},{"name":"Pakistan","iso":"PK","kind":"region"},{"name":"Philippines","iso":"PH","kind":"region"},{"name":"South Korea","iso":"KR","kind":"region"},{"name":"Taiwan","iso":"TW","kind":"region"},{"name":"Thailand","iso":"TH","kind":"region"},{"name":"Vietnam","iso":"VN","kind":"region"},{"name":"American Samoa","iso":"AS","kind":"region"},{"name":"Bangladesh","iso":"BD","kind":"region"},{"name":"Bhutan","iso":"BT","kind":"region"},{"name":"Brunei Darussalam","iso":"BN","kind":"region"},{"name":"Cambodia","iso":"KH","kind":"region"},{"name":"Cook Islands","iso":"CK","kind":"region"},{"name":"East Timor","iso":"TL","kind":"region"},{"name":"Fiji","iso":"FJ","kind":"region"},{"name":"French Polynesia","iso":"PF","kind":"region"},{"name":"Guam","iso":"GU","kind":"region"},{"name":"Kiribati","iso":"KI","kind":"region"},{"name":"Laos","iso":"LA","kind":"region"},{"name":"Maldives","iso":"MV","kind":"region"},{"name":"Marshall Islands","iso":"MH","kind":"region"},{"name":"Micronesia","iso":"FM","kind":"region"},{"name":"Mongolia","iso":"MN","kind":"region"},{"name":"Nauru","iso":"NR","kind":"region"},{"name":"Nepal","iso":"NP","kind":"region"},{"name":"New Caledonia","iso":"NC","kind":"region"},{"name":"Niue","iso":"NU","kind":"region"},{"name":"Norfolk Island","iso":"NF","kind":"region"},{"name":"Northern Mariana Islands","iso":"MP","kind":"region"},{"name":"Palau","iso":"PW","kind":"region"},{"name":"Papua New Guinea","iso":"PG","kind":"region"},{"name":"Pitcairn Islands","iso":"PN","kind":"region"},{"name":"Samoa","iso":"WS","kind":"region"},{"name":"Solomon Islands","iso":"SB","kind":"region"},{"name":"Sri Lanka","iso":"LK","kind":"region"},{"name":"Tokelau","iso":"TK","kind":"region"},{"name":"Tonga","iso":"TO","kind":"region"},{"name":"Tuvalu","iso":"TV","kind":"region"},{"name":"Vanuatu","iso":"VU","kind":"region"},{"name":"Wallis and Futuna","iso":"WF","kind":"region"},{"name":"Hong Kong","iso":"HK","kind":"region"},{"name":"Singapore","iso":"SG","kind":"region"},{"name":"Macau","iso":"MO","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Creative Agencies","Digital Marketing"],"lifecycle":[{"event":"open","at":"2026-09-25T17:22:53Z"}],"visa":[],"liveness":{"score":49,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.765,"p_room":0.75,"age_days":24,"expected_fill_days":33,"reasons":["seen:24","win:late"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/the-hoffman-agency-apac-it-manager-cybersecurity","json_url":"https://alion.io/job/the-hoffman-agency-apac-it-manager-cybersecurity.json","meta":{"generated_at":"2026-10-20T07:15:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7779,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":455184},"rest":"https://alion.io/mcp/rest/get_company?id=455184"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthe-hoffman-agency-apac-it-manager-cybersecurity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthe-hoffman-agency-apac-it-manager-cybersecurity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthe-hoffman-agency-apac-it-manager-cybersecurity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/the-hoffman-agency-apac-it-manager-cybersecurity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthe-hoffman-agency-apac-it-manager-cybersecurity"}]}