Assistant Manager, Information Security & Assurance

Prudential Assurance Malaysia Berhad; Kuala Lumpur; Presencial; MYR 90.000 - 150.000; Jornada completa

Descripción de la vacante

Prudential Assurance Malaysia Berhad in Kuala Lumpur, Malaysia, is hiring for an IT Risk & Security Specialist to coordinate information security risk management and ensure guideline compliance. The role supports audits, monitoring, incident response and security improvements across the organization.

The incumbent will assist with risk assessments, control testing, and security governance under guidance from senior leadership.

Formación

• Degree in Information Technology, Cybersecurity, Computer Science or related field.
• Minimum 3 years of experience in information security, cybersecurity or technology risk.
• Working knowledge of OS, networks, applications and database security best practices.
• Working knowledge of information security standards and established procedures.

Responsabilidades

• Coordinate IT risk management activities and ensure policy compliance.
• Assist with security audits, evidence collection and tracking findings.
• Support security monitoring, incident response and threat management with the Group SOC.
• Review security configurations against policies and standards.
• Contribute to cyber resilience and business continuity exercises.
• Monitor KRIs and elevate exceptions for action by management.
• Prepare routine security reports and dashboards for review.
• Assist security improvement initiatives and project activities.
• Promote security awareness across the organization.

Conocimientos

Information security

Cybersecurity

Risk management

Network security

Educación

Degree in Information Technology or Cybersecurity or Computer Science

Descripción del empleo

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

The incumbent is responsible for coordinating IT related risk management activities; ensuring compliance to policies and guidelines by PCA and regulatory body & supporting IT audits & reviews.

This role is responsible for supporting the implementation and day-to-day operation of information security controls, assisting with compliance to Group Policies and Procedures, relevant industry practices (i.e PCI DSS, NIST) and applicable regulatory requirements under the guidance of the Manager and senior leadership.

Key Responsibilities

• Support the implementation and operation of the organization’s information security initiatives in accordance with Group directives, established frameworks and applicable regulatory requirements (i.e. BNM RMiT, PDPA and PCI DSS).
• Assist in identifying and assessing information security and cybersecurity risks, maintaining risk records, and tracking agreed mitigation actions to completion.
• Assist with security-related internal and external audit activities, including evidence collection, submission tracking and follow-up on the closure of findings.
• Support security monitoring, incident response and threat management activities, including coordination with Group SOC and relevant stakeholders for incident handling and escalation.
• Perform security reviews and assist in validating security configurations for applications and infrastructure against established security policies and standards.
• Support cyber resilience and business continuity activities, including preparation for and participation in incident response exercises and cyber tabletop exercises.
• Monitor the security posture and cyber hygiene of the organization’s information assets, track Key Risk Indicators (KRIs), and elevate identified exceptions for further action.
• Prepare routine security reports, dashboards and supporting information for management review and decision-making.
• Support the delivery of security improvement initiatives and assigned project activities to strengthen the organization’s overall security posture.
• Coordinate and support security awareness activities to promote good security practices across the organization.

Qualifications & Requirements

• Degree in Information Technology, Cybersecurity, Computer Science or a related field.
• Minimum 3 years of relevant working experience in information security, cybersecurity, technology risk or a related area.
• Working knowledge of operating systems, networks, applications and database security best practices.
• Working knowledge of information security standards with the ability to apply established procedures.

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.