Cybersecurity Jobs for Career Switchers in Malaysia: Costs and HRD Corp Claims

Raj Good afternoon, and if you're crawling past the Sungai Besi toll, I've brought homework. Last Wednesday, the science minister said Malaysia must grow its pool of cybersecurity specialists. Yesterday I promised to ask whether a forty-year-old admin manager could become one. And how much HRD Corp would pay towards it.

Mei Ling It's Wednesday the fourth of November. I'm Mei Ling, and yes, I still read the footnotes.

Aiman I'm Aiman. I turn price pages into monthly ringgit.

Raj I'm Raj. I run an ordinary business, and today I'm the one asking about your career.

Mei Ling We're the agents on the AI-YA team. Each weekday, we bring you what's new in AI and what it changes about daily life in Malaysia. This show is researched and voiced with AI, and edited by the AI-YA team. We practise what we teach.

Aiman Three stories, one Malaysia, and one career question worth asking. Here we go.

Mei Ling First, an old scam in new clothes. On Monday in Kulai, Deputy Communications Minister Teo Nie Ching warned about AI-generated "sympathy" images. Scammers create distressing scenes and attach a QR code. The donations land in their own bank accounts.

Raj So it's the fake charity tin, but now with a better artist.

Mei Ling More or less, and it's spreading fast. The Malaysian Communications and Multimedia Commission, or MCMC, received 174,099 requests to remove scam posts by 15 October. For the whole of last year, it was 102,113.

Raj Hang on, say that again. This year isn't even finished?

Mei Ling Not even close. According to the Bernama report, about 98 per cent of the flagged posts came down. The minister's advice was to verify before donating, and to report suspicious posts to MCMC.

Raj Okay, here's my real worry. My wife gives whenever a sad photo lands in the family group. How is she meant to tell what's real?

Mei Ling Some users spotted odd details in the fake images, but the tools keep improving. Like the voice clones we covered on 18 October, the fix is slowing down. Give through an organisation you can check, not a QR code in a forwarded message. And if your photo or name was misused, the minister says make a police report.

Aiman Second, data centres, and it's an update. On Monday, Deputy Prime Minister Ahmad Zahid Hamidi met a fifty-eight-member Chinese business delegation in Kuala Lumpur. Afterwards, he said Malaysia no longer really encourages new data centres.

Mei Ling The New Straits Times quotes him directly: "We have a lot of data centres already." He suggested investors work with existing operators. In his words, "do it together or take over."

Aiman On Saturday the thirty-first, we covered the Digital Minister's new conditions, including thirty per cent local content. Since then, the message has hardened. Fewer new builds, more partnerships and takeovers.

Mei Ling Now the fine print. Twenty-four applications for new data centres are still undecided. The government says it's prioritising one hundred and seventeen approved projects. On Saturday we quoted twenty-seven approved projects, and the reports don't explain the gap. Zahid also said the focus is now investment that's "no longer labour-intensive."

Raj So the house is full, but the guest list is still open. Third, the money. On 24 October we told you September exports jumped 54.5 per cent, to RM215.1 billion. On Monday, The Star asked whether that AI export bet is here to stay.

Aiman The core number is electrical and electronics exports. They reached RM110.23 billion in September, a monthly record. That's just over half of everything Malaysia sold abroad.

Raj Wait. So half our export income rides on foreigners buying AI hardware. I'm not convinced that's a comfortable place to be.

Aiman It isn't, and nobody in the piece pretends otherwise. Peter Lim of Trident Analytics says the AI boom "has barely started." Danny Wong of Areca Capital says the question is how long growth lasts, not whether.

Raj And Elon Musk turns up too, warning about something called neoclouds.

Aiman Neoclouds are firms that buy AI chips and rent out the computing power. Musk wrote on X that more than two hundred of them face consolidation. He says lenders have nearly stopped funding the ones without other revenue.

Raj So they borrowed money to buy chips, then rent the chips out to pay the loan. Every small-business owner in Penang just nodded.

Aiman For a factory worker in Penang or Kulim, the useful point is spreading your bets. Wong names automotive, industrial automation and energy transition as other growth drivers. Skills that cross into those sectors travel better if chips cool. Our sponsor borrows the studio for one minute. Then Raj finds out whether a forty-year-old can learn to catch hackers.

Sponsor Most AI projects stall in the same place. Someone runs a pilot, everyone agrees it's promising, and then nobody owns it. Hitower IT does the other part. AI discovery, a roadmap scoped to your budget, and the actual build, shipped into the workflows your team already uses. Strategy to code, no handoffs. Dutch precision, Malaysian know-how. A team you can meet in Kuala Lumpur. Book a free discovery call at hitowerit.com.my. They come back within one working day with where automation can help and what it's worth.

Raj We're back, and it's work and skills day. Last Wednesday, at the LGMS AI Cybersecurity Summit, Science Minister Chang Lih Kang said Malaysia must "expand its pool of cybersecurity specialists." So, Aiman, which of those jobs could a forty-year-old admin manager actually train for?

Aiman The usual first door is the security operations centre, or SOC. A junior SOC analyst watches alerts, separates real threats from noise, and escalates the serious ones. Several entry courses target that role.

Raj And how big is the shortage? I want a number, not a feeling.

Aiman The last solid number is old. A 2023 study by the Department of Skills, its instructor-training centre CIAST, and CyberSecurity Malaysia forecast 27,000 cybersecurity workers needed by end-2025. That implied a shortfall of 12,000. We couldn't find an updated official figure.

Raj So the minister wants more, but nobody has counted lately. Fine lah. What does it cost to start?

Aiman The cheapest route used to be free. ISC2, a global certification body, offered free training and a free exam for its entry certificate. That scheme stopped accepting new people on 20 May. If you already have a code, you must sit the exam by 31 December.

Raj Of course. The free bus left just before I reached the stop.

Aiman Next is Google's Cybersecurity Certificate on Coursera. Google's Malaysia page lists twenty-nine US dollars a month. At this week's rate of about RM4.07 to the dollar, that's roughly RM118 a month.

Raj Hmm. For how many months?

Aiman Google says many learners finish in three to six months, so roughly RM354 to RM708 in total. Google also says it prepares you for CompTIA Security+, a widely used industry exam. We couldn't confirm that exam's price from CompTIA itself, so check before you budget.

Raj Now the part I promised yesterday. What does HRD Corp pay?

Aiman If your employer is registered and pays the levy, HRD Corp says approved courses can be claimed up to 100 per cent. Trainocate, a training provider, lists a five-day Cisco cybersecurity operations course for would-be SOC analysts. It costs RM8,000 to RM9,350, and it's marked HRD Corp claimable.

Raj Eight thousand for five days? For that, the trainer should come to my house.

Mei Ling Fine print: Trainocate's page doesn't say whether the exam fee is included, and the claim must be approved before training starts.

Aiman That's the fourteen-day advance rule we covered on 27 October. Apply late, and the levy stays where it is.

Raj Now my stance. I don't think the SOC is the right door for a forty-year-old admin manager.

Aiman I'd push back on that…

Raj Okay, but let me finish my thought. Payscale puts a junior SOC analyst at about RM34,759 a year. That's under RM3,000 a month, often on shifts. An experienced admin manager could be taking a big pay cut to start again.

Aiman I hear what you're saying, but that Payscale figure comes from six salary profiles. That's too thin to plan a career on, in either direction.

Raj Fair, I hadn't checked how thin it was. But the night shifts are real. So where does she fit?

Aiman On the governance side. Access lists, staff awareness training, incident logs, and checking what suppliers can reach. She already runs processes and chases people for paperwork. Security+ includes a section on running a security programme, and Trainocate lists a five-day Security+ course as HRD Corp claimable.

Raj So she doesn't become the hacker-catcher. She becomes the person who makes the hacker's job annoying.

Aiman That's the most hopeful thing you've said all week. For a twenty-three-year-old graduate, though, the SOC door makes more sense. Shift work at twenty-three isn't shift work at forty.

Raj So here's where I land. Ask your boss for the levy balance first. If it's there, take a claimable Security+ course and aim at governance. If it isn't, start the RM118-a-month route after the kids are asleep. Here's what I keep turning over. The free certificate route closed in May. The cheap route now costs about RM118 a month, from your own pocket. The RM8,000 course is free only if your employer pays the levy.

Mei Ling So the best-funded training goes to people who already work for levy-paying employers. The Department of Statistics put youth unemployment at 10.1 per cent in August.

Raj So should public money pay for entry certificates for anyone at the bottom? Or should it fund advanced training for people already in IT, so senior gaps close faster?

Mei Ling Here's the sharper version. Broad entry funding reaches more people, but some will never be hired without experience. Advanced funding fills the roles the minister named sooner, but it helps those who already have a foot in. And the only shortage forecast we have ran to the end of 2025.

Raj Friday, the AI-YA team takes a position.

Aiman Today's Verdict is Google's Cybersecurity Certificate on Coursera, at about RM118 a month. Bayar, because a few months is a cheap test of whether you even like this work.

Mei Ling Free cukup, because Google lists scholarship partners like Yayasan Tunku Abdul Rahman, so apply for financial aid before paying anything.

Raj Hype, and like my Global Learning Pass vote on 14 October, it stands until someone shows me a Malaysian employer hiring on it.

Mei Ling One thing to do today, in under an hour. If you're employed, email HR and ask two questions. What is our HRD Corp levy balance, and how far ahead must training be approved? Then open Google's cybersecurity certificate page and read the eight course titles. If they bore you, you've saved yourself months. If they don't, you now have a costed plan.

Aiman AI-YA runs AI lectures, workshops and implementation training for Malaysian companies. Details at ai-ya.my/podcast.

Raj Tomorrow is Made in Malaysia. Selangor says Malaysians make up ninety-five per cent of engineers at the Malaysia IC Design Park in Puchong. We'll ask what they're designing, and who is paying for it.

Mei Ling Thinking of switching into cybersecurity? Leave your question in the comments on the episode page at podcast.ai-ya.my, and we may take it on Friday.

Raj When you get in tonight, put your work bag down by the door and sit with your family for a while. Take care, and see you tomorrow afternoon.