Head IT Security Management

EPS Malaysia; Kuala Lumpur; On-site; MYR 100,000 - 150,000; Full time

Job summary

A leading financial services company is seeking a seasoned IT Security Department Head to manage the security of IT systems across its Banking Group. The ideal candidate will have over 10 years of managerial experience in IT Security along with several industry certifications. Responsibilities include overseeing IT Security policies, ensuring compliance with regulations, and leading security initiatives across multiple regions. Strong leadership and interpersonal skills are essential for this role, which is critical for maintaining a secure corporate environment.

Qualifications

• More than 10 years of supervisory and managerial experience in IT Security.
• Strong leadership and interpersonal competencies required.
• Must hold several industry-recognized security certifications.

Responsibilities

• Oversee IT Security for systems, networks, applications, and databases.
• Develop and execute the IT Security Strategy for the Banking Group.
• Manage compliance with legal and regulatory requirements.

Skills

Interpersonal Skills

Leadership Skills

Time and Resource Management

Education

Degree/Higher Diploma in Computer Science/IT

Tools

SIEM

IDMS

DLP

Job description

Responsibilities

• Oversee Group IIT Security Department for IT systems, networks, applications and databases.
• Develop and implement IT Security Strategy plan for Banking Group of companies.
• Propose and seek approval for IT Security budget (Capex and Opex).
• Develop, maintain and implement IT Security Policy for Banking Group of companies.
• Strategize and reorganize IT Security Department in order to establish a proper process of “makers” and “checkers”.
• Recommend and implement new IT Security initiative to secure corporate and customer sensitive information.
• Facilitate IT Risk to ensure effective IT risk identification, mitigation and monitoring.
• Participate in IT projects to provide advice on security and compliance requirements.
• Manage compliance reviews of IT functions to ensure the state of compliance with legal and regulatory requirements, internal policies and standards.
• Manage the network security review and penetration test exercise.
• Ensure manuals are timely reviewed and safe-keeping of all policies and procedures.
• Ensure IT audit reports from internal and external auditors are responded and IT audit issues are tracked and rectified within the agreed timeframe.
• Ensure compliance to mandates set out by electronic partners (VISA, Mastercard, AMEX and MEPS).
• Evaluate and implement proper security tools (SIEM, IDMS, DLP, etc) in order to mitigate the weaknesses in manual security controls as well as to promote an effective and efficient administration.
• Oversees security technology areas like:
  • Firewalls
  • Internet surfing proxy servers
  • Intrusion detection
  • Advanced Persistency Threats
  • Anti DDOS solutions
  • Internet Fraud Solutions
  • Data Loss Protection solutions
  • Dual control of ID and passwords
  • Enterprise password vaults
  • Escalation of user privileges
  • ID management
  • Single sign on Managerial (team/group responsibilities)
• Manage & provide leadership to a team of managers, technical & support staffs.
• Decision maker at department level for all IT Security related matters.
• Provide guidance to IT Staff & Business User in complying to regulatory & audit requirement.
• Organizational responsibilities including Strategic Cost Management and Financial Goals.
• Recommend & implement security architecture for banking Group of companies.
• Support group wide IT Security requirement (Singapore, Vietnam, Hong Kong, Insurance & Investment Banking).
• Update security statuses to Senior Management at IT Security/Risk Meeting.

Jobholder Requirements

• Degree/Higher Diploma in Computer Science/IT Experience/Requirements.
• More than 10 years of supervisory and managerial experience in IT Security Department.
• Interpersonal Skill.
• Leadership Skill.
• Time and Resource Management Skill.
• Certification/Licensing Requirements:
  • Certified CRISC (Certified Risk Information Systems Control) by ISACA.
  • Certified CHFI (Certified Hacking Forensic Investigator) by EC-Council.
  • Certified ECSA/LPT (Certified Security Analyst) by EC-Council.
  • Certified CEH (Certified Ethical Hacker) by EC-Council.
  • Certified CISSP (Certified Information Systems Security Professional) by (ISC)².
  • Certified CISA (Certified Information System Auditor) by ISACA.
  • Certified CISM (Certified Information Security Manager) by ISACA.