APAC IT Manager (Cybersecurity)

About the role

We are looking for an APAC‑wide IT Manager to lead our cybersecurity programme in Kuala Lumpur. The role combines security governance, policy management and hands‑on technical oversight while supporting the broader IT team. You will work closely with internal clients and a diverse talent pool to protect our digital assets and enable business growth.

Key responsibilities

• Own the lifecycle of security documentation, including IT Security Policy, Incident Response, BCP, DRP and AI policy, keeping them current with threats and regional regulations such as PDPA.
• Lead the acquisition and maintenance of security certifications (ISO 27001, SOC 2, Cyber Essentials) and coordinate audits.
• Respond to client security questionnaires, RFPs and due‑diligence requests, recommending cost‑effective controls.
• Conduct annual risk assessments across Microsoft 365, endpoint infrastructure and third‑party integrations, and drive remediation.
• Design and deliver an annual security awareness programme, including phishing simulations and policy refreshers.
• Monitor vulnerability alerts, assess impact, apply patches or mitigations and trigger incident response when needed.
• Evaluate, procure and integrate security tools, managing vendor relationships and ensuring alignment with client and regulatory requirements.
• Provide backup support for IT infrastructure, endpoint troubleshooting and Microsoft 365 administration when required.

Required profile

• Detail‑oriented and methodical.
• Team player with an ownership mindset.
• Proactive, spotting risks before they become incidents.
• Passionate about cybersecurity and continuous learning.
• Strong communicator able to translate technical concepts for non‑technical audiences.
• Resourceful problem‑solver with a cost‑conscious approach.
• Adaptable and willing to step outside core duties when the team needs support.

Required skills

• Microsoft Defender, Sophos, BitLocker and Microsoft Intune.
• Microsoft 365 security and compliance tools (Defender for Office 365, Azure AD/Entra ID).
• Endpoint protection and vulnerability management solutions.
• Security policy management and incident response procedures.
• Risk assessment and audit experience.

What we offer

• Competitive salary and benefits package.
• Career advancement opportunities within a leading marketing and communications agency.
• Four‑week sabbatical after four years of service.
• Inclusive culture that values diverse thinking and ideas.