Assistant Manager, Endpoint Security

Great Eastern Life; Kuala Lumpur; On-site; MYR 75,000 - 95,000; Full time

Job summary

A leading insurance firm is seeking an Assistant Manager for Endpoint Security in Kuala Lumpur. The role requires providing technical support for various security platforms, managing incidents, and collaborating with teams to enhance security measures. Candidates should possess a relevant degree and significant experience in IT security, along with strong analytical and problem-solving skills.

Qualifications

• 5+ years of experience in IT security or equivalent.
• Information Security Certification involving incident response, ethical hacking, or cybersecurity will be an advantage.

Responsibilities

• Provides technical support for Endpoint security platforms.
• Monitor and respond to security alerts; manage cyber incidents.
• Lead endpoint security platform operations and collaboration.

Skills

Intermediate knowledge of security systems

Analytical and problem-solving skills

Intermediate experience handling cyber security alerts

Self-motivated and team player

Education

Diploma/Degree/Professional Degree/Master’s Degree in Computer Science/Information Technology/Engineering

Tools

EPP

EDR

VPN Security

M365 Security

Job description

Overview

Job Description - Assistant Manager, Endpoint Security (250001NS)

Assistant Manager, Endpoint Security (250001NS)

Responsibilities

• Reports to Security Product Management Lead under the Security Product Management Services (SPMS) Domain.
• Provides end to end technical support for Endpoint security platforms such as Trellix EPP, Trellix Encryption, VMWare Carbon Black EDR, Cisco AnyConnect, Zimperium, MS O365 ATP, Cisco DUO, Agile WaterMark and others delivered by GE IT Security.
• This is a technical position, supporting GE’s IT Security strategy and direction.
• Act as Endpoint tower lead and main liaison for all endpoint security platforms within the IT Security Department.
• Lead and collaborate with designated Manage Security Service Provider (MSSP) to operate, troubleshoot and maintain availability of Endpoint Security platforms and all assets in security platforms managed and owned by GE.
• Monitor, review and respond to security alerts escalated from NGSOC; manage cyber incidents related to threats, intrusions, compromise, and unusual, unauthorized or illegal activity via CSIRT framework.
• Create and fine-tune policies and rules within each endpoint security platform and other log sources to correlate events and improve detection capability.
• Assist in recommending, planning and implementing security measures or enhancements to protect computer systems, networks and data.
• Work closely with Risk and Compliance during audits and with CSIRT team during IT security incidents and crisis situations.
• Take accountability for business and regulatory compliance risks and implement steps to mitigate them.
• Maintain awareness of industry trends on regulatory compliance, emerging threats and technologies to understand risk and safeguard the company.
• Highlight potential concerns/risks and proactively share best risk management practices.

Qualifications

• Possess at least a Diploma/ Degree/ Professional Degree/ Master’s Degree in Computer Science/Information Technology/ Engineering or equivalent.
• At least 5 years of working experience in related field. Preferably Senior Executives level in IT/Computer or equivalent.
• Intermediate knowledge and skills in handling security systems such as EPP, EDR, XDR, VPN Security, M365 security and others.
• Intermediate experience in handling cyber security alerts and incidents.
• Strong analytical and problem-solving skills.
• Good knowledge of Incident Response and Investigative methodology.
• Self-motivated and a team player.
• Information Security Certification involving incident response, ethical hacking, or cybersecurity (e.g., GCIA, GCIH, CISSP, CEH) will be an added advantage.
• High level of integrity, accountability and good teamwork attitude.
• Takes initiative to improve current state and is adaptable to changes.

How you succeed

• Champion and embody our Core Values in everyday tasks and interactions.
• Demonstrate a high level of integrity and accountability.
• Take initiative to drive improvements and embrace change.
• Take accountability for business and regulatory compliance risks, implementing measures to mitigate them effectively.
• Keep abreast with industry trends, regulatory compliance, and emerging threats and technologies to understand and highlight potential concerns/risks to safeguard the company proactively.

Who we are

Founded in 1908, Great Eastern is a well-established market leader and trusted brand in Singapore and Malaysia. With over S$100 billion in assets and more than 16 million policyholders, including 12.5 million from government schemes, it provides insurance solutions to customers through three successful distribution channels – a tied agency force, bancassurance, and financial advisory firm Great Eastern Financial Advisers. The Group also operates in Indonesia and Brunei. The Great Eastern Life Assurance Company Limited and Great Eastern General Insurance Limited have been assigned the financial strength and counterparty credit ratings of "AA-" by S&P Global Ratings since 2010, one of the highest among Asian life insurance companies. Great Eastern's asset management subsidiary, Lion Global Investors Limited, is one of the leading asset management companies in Southeast Asia. Great Eastern is a subsidiary of OCBC, the longest established Singapore bank, formed in 1932. It is the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s and AA- by both Fitch and S&P. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.

To All Recruitment Agencies: Great Eastern does not accept unsolicited agency resumes. Please do not forward resumes to our email or our employees. We will not be responsible for any fees related to unsolicited resumes.