Information Security Manager

About the role

The Information Security Manager (ISM) is the primary cybersecurity focal point at the GE Aerospace Engine Services Malaysia (GEESM) site in Subang. The role implements, sustains, monitors and audits cybersecurity controls, ensures compliance with global, regional and contractual requirements such as CMMC and EASA Part-IS, and promotes a strong cybersecurity culture. It bridges OT, IT and cybersecurity, acts as first-level approver for security-related changes and works with site leadership and Digital Technology to improve the site's cyber posture.

Key responsibilities

• Lead the Site Cyber Implementation Team in deploying and sustaining the Cyber Playbook and corporate cyber standards
• Track site cyber activities and risks (CMMC/IA defects, EASA Part-IS, vulnerabilities, endpoint monitoring coverage) and maintain a site cyber action plan
• Report cybersecurity metrics in Shop MOR/Daily Management and update site and DT leadership
• Approve security-related change requests (firewall rules, ports, OT/IT connectivity) after risk assessment and documentation
• Ensure compliance with cybersecurity regulations, standards and contractual requirements, and support customer audits, regulatory inspections and technical reviews
• Support incident response coordination with the Global Incident Response Team, incident readiness, drills and post-incident reviews
• Promote cybersecurity rules and best practices through presentations and training, and engage shop floor, OT and cross-functional stakeholders

Required profile

• Bachelor's or Master's degree in Information Technology, Cybersecurity, Computer Science, Engineering or a related field
• 5-7 years of experience in OT and cybersecurity, preferably in manufacturing, industrial or critical infrastructure environments
• Experience managing audits and ensuring cyber controls are effective
• Ability to travel 30% (about once per month) to the site

Required skills

• Strong knowledge of regulatory and standards requirements (CMMC, EASA Part-IS, IA)
• Proven ability to lead projects and coordinate cross-functional teams
• Preferred: excellent communication and stakeholder management, able to explain complex topics to non-technical audiences