Cyber Defense Lead

HLB; Petaling Jaya; On-site; MYR 420,000 - 620,000; Full time

Job summary

Hong Leong Bank is seeking a seasoned Cyber Defense Lead to spearhead vulnerability management, governance, system security and advisory functions. You will lead a VAPT program, establish governance frameworks, and advise on security architecture and projects across the organization.

The ideal candidate has 8+ years in information security, strong leadership, and relevant certifications. The role requires strategic thinking, cross-functional collaboration, and a proactive risk mindset within a

Qualifications

• Bachelor’s degree in Computer Science, Information Security or related field; master’s preferred.
• 8+ years of progressive information security experience.
• In-depth knowledge of ISO 27001, NIST and audit management.
• Strong system security knowledge: endpoint security, encryption and hardening.
• Experience in security architecture and advisory services.
• Certifications such as CISSP, CISM, OSCP, CEH are desirable.
• Excellent communication and ability to convey complex security concepts.

Responsibilities

• Lead and mentor a VAPT team; define scope and reporting.
• Oversee vulnerability assessments across apps, infra and networks.
• Manage security governance: policies, standards, audits.
• Oversee security reviews of outsourced providers and vendors.
• Develop security architecture and advise on projects.
• Monitor security projects from initiation to delivery.

Skills

Security governance

Security architecture

Security advisory

Project management

Vulnerability management

Audit management

Endpoint security

Data protection

Education

Bachelor’s degree in CS/InfoSec

Master’s degree preferred

Job description

If you are looking to excel and make a difference, take a closer look at us…

Overview:
We are seeking a highly experienced and strategic Cyber Defense Lead to spearhead our comprehensive security operations. This pivotal role will be responsible for overseeing and optimizing our vulnerability management, security governance, system security, and security advisory functions. The ideal candidate will be a proven leader with deep technical expertise across various security domains, exceptional organizational skills, and a strong commitment to enhancing our overall security posture.

Responsibilities:

VAPT (Vulnerability Assessment & Penetration Testing) Team Management:

• Lead, mentor, and manage a team of VAPT specialists, fostering a culture of continuous improvement and technical excellence.

• Develop, implement, and mature the VAPT program, including scope definition, methodology, tool selection, and reporting.

• Oversee the execution of regular vulnerability assessments and penetration tests across applications, infrastructure, and networks.

• Prioritize and track remediation efforts for identified vulnerabilities, collaborating with relevant teams to ensure timely resolution.

• Stay abreast of emerging threats, vulnerabilities, and attack techniques to enhance VAPT strategies.

_ Security Governance: _

• Establish and maintain robust security governance frameworks, policies, standards, and procedures in alignment with industry best practices (e.g., ISO 27001, NIST, internal compliance requirements).

• Lead and facilitate security audit assessments (internal and external), ensuring compliance with regulatory and organizational requirements.

• Manage and conduct OSP (Outsourced Service Provider) security reviews, including due diligence and ongoing monitoring of third-party security posture.

• Oversee the vendor security management program, assessing security risks posed by third-party vendors and ensuring appropriate controls are in place.

• Provide governance and oversight over the security posture of all security components and solutions deployed within the organization.

_ System Security: _

• Manage and optimize endpoint security solutions (e.g., EDR, antivirus), ensuring comprehensive protection across all devices.

• Oversee the lifecycle management of SSL/TLS certificates, ensuring timely renewals and proper implementation.

• Develop and implement strategies for data encryption across various systems and data at rest/in transit.

• Define and enforce hardening standards for operating systems, applications, and network devices.

• Manage and secure file sharing mechanisms, ensuring data integrity, confidentiality, and access control.

_ Security Advisory, Architecture & Project Office: _

• Act as a primary security advisor to business units and technology teams, providing expert guidance on security best practices, risk mitigation, and architectural design.

• Contribute to the development and evolution of the overall security architecture, ensuring alignment with business objectives and threat landscape.

• Lead the security project office function, managing the lifecycle of security-related projects from initiation to closure.

• Define project scopes, objectives, resource requirements, timelines, and budgets for security initiatives.

• Monitor project progress, identify and mitigate risks, and ensure successful delivery of security projects.

Skills and Experience We Are Looking For:

• Bachelor’s degree in Computer Science, Information Security, or a related field. Master’s degree preferred.

• 8+ years of progressive experience in information security

• In-depth knowledge of security governance frameworks (ISO 27001, NIST, etc.) and experience with audit management.

• Strong understanding of system security principles, including endpoint security, encryption, hardening, and data protection.

• Experience in security architecture and providing security advisory services.

• Demonstrated success in managing security projects and programs.

• Relevant industry certifications such as CISSP, CISM, OSCP, CEH, or equivalent are highly desirable.

• Excellent communication, interpersonal, and presentation skills, with the ability to articulate complex security concepts to technical and non-technical audiences.

• Strong analytical and problem-solving abilities, with a keen eye for detail.

• Ability to work effectively in a fast-paced and dynamic environment.

About Hong Leong Bank

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve ourmission of infusing diversity in thinking and skillsets into our organisation.Candidatesare assessed based on merit and potential, in line with our mission to attract and recruit the best talent available.Expanding on our "Digital at the Core" ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.