About the Role

The Kuala Lumpur office is the technology powerhouse of MoneyLion. We pride ourselves on innovative initiatives and thrive in a fast paced and challenging environment. Join our multicultural team of visionaries and industry rebels in disrupting the traditional finance industry!

As a Lead Cybersecurity Analyst, you will be working under MoneyLion CDOC which is responsible to identify, protect, detect and respond to threats against MoneyLion. You will be responsible to understand MoneyLion’s corporate and cloud environment, identify its weaknesses and take necessary measures to correct and strengthen its security posture.

What you’ll do:

• Lead and mentor a team of cybersecurity analysts, providing guidance, training, and support to ensure the team’s effectiveness and professional growth
• Lead vulnerability assessments and security reviews to identify vulnerabilities within critical systems
• Analyze vulnerability assessment reports, triage vulnerabilities, then recommend and drive remediation/mitigation plans through a risk-based approach
• Develop and implement comprehensive security policies, procedures, and strategies to protect organizational assets. Stay informed about the latest cybersecurity trends and technologies to enhance security measures
• Ensure compliance with relevant laws, regulations, and industry standards. Perform risk assessments and develop risk mitigation strategies
• Prepare and present detailed reports on security incidents, vulnerabilities, and overall security posture to senior management. Maintain accurate documentation of security activities and incidents
• Work closely with other IT and business units to integrate security practices into daily operations and ensure alignment with organizational goals

What we’re looking for:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field. Advanced degree or certifications (e.g., CISSP, CISM, CISA) preferred.
• Minimum of 4 years of experience in cybersecurity roles, with at least 1 year in a leadership or supervisory position.
• Proven ability to lead and motivate a team, manage multiple projects, and drive results in a fast-paced environment.
• Strong written and verbal communication skills. Ability to convey complex security concepts to non-technical stakeholders.
• Ability to set and manage expectations with stakeholders and team members.
• Strong analytical skills and the ability to think creatively when approaching technical challenges.
• Experienced in utilizing tools to conduct vulnerability scans and recognizing security vulnerabilities.
• Strong report writing, and communication (written and verbal) skills.
• Able to accurately validate the presence of identified vulnerabilities.
• Good understanding of the latest cyber threat landscape (e.g. attack vectors, TTPs, targets, etc.) including system and application security vulnerabilities.
• Good understanding of network security architecture concepts.
• Good scripting/programming skills for automation (Python, Powershell, Bash, etc.)
• Ability to respond to immediate requests from stakeholders and assess ongoing priorities, executing with minimal direction or oversight

It’s a plus if you have:

• Experience with AWS cloud security and SIEM tooling.
• Knowledge of security defense systems (e.g. Firewall, AV, IDS, IPS, etc.).
• Knowledge of compliance frameworks (e.g., NIST, SOX, SOC2).
• GPEN/GWAPT/GCPN/OSCE/OSCP certification

What's Next...

After you submit your application, you can expect the following steps in the recruitment process:

1. Online Technical Assignment
2. Interview - Talent Acquisition Team (Virtual)
3. Interview - Hiring Manager interview (Face-to-face)