IAM Lead: Enterprise Access & Security Strategy

Hong Leong Bank; Malaysia; On-site; MYR 180,000 - 320,000; Full time

Job summary

Hong Leong Bank is seeking an Access Management Lead to steer the IT Application and Database Security section, shaping the IAM framework across the group. You will lead a technical team, drive automation, ensure audit readiness, and enforce strict regulatory compliance in a dynamic banking environment.

The role requires 10+ years in application and database security, with 5+ years in a supervisory capacity, and hands-on expertise in IAM/PAM, RBAC, and identity governance.

Qualifications

• Education: Bachelor’s degree or higher in CS/IT/Cybersecurity or related field.
• Experience: 10+ years in Application & Database Security with 5+ years in a supervisory role.
• Certifications (Preferred): CISSP, CISM, CISA, CIAM or equivalent security credentials.

Responsibilities

• Oversee end-to-end user access management across enterprise apps and databases per access control matrices.
• Govern privileged/ elevated IDs; conduct periodic access reviews and housekeeping to remove dormant accounts and redundant permissions.
• Oversee SoD controls and access for BCP/DRP exercises.
• Drive IAM automation to streamline provisioning and deprovisioning; deploy PAM solutions and modern IAM tools.
• Implement automated monitoring and continuous compliance controls across enterprise systems.
• Lead risk assessments for new IT projects and embed proper access controls from design to deployment.
• Establish continuous self-audit and security verification; maintain audit readiness for internal/external/regulatory assessments.
• Provide leadership, coaching, and strategic direction to a team of managers, engineers, and staff.

Skills

Identity governance

PAM

RBAC

Audit & compliance

Team leadership

Problem solving

Communication

Education

Bachelor's degree or higher diploma in CS/IT/Cybersecurity

Job description

Hong Leong Bank is seeking an Access Management Lead to steer the IT Application and Database Security section, shaping the IAM framework across the group. You will lead a technical team, drive automation, ensure audit readiness, and enforce strict regulatory compliance in a dynamic banking environment.

The role requires 10+ years in application and database security, with 5+ years in a supervisory capacity, and hands-on expertise in IAM/PAM, RBAC, and identity governance.