IAM Lead – IT Application & Database Security

Hong Leong Bank; Malaysia; On-site; MYR 180,000 - 320,000; Full time

Job summary

Hong Leong Bank is seeking an Access Management Lead to steer the IT Application and Database Security section, shaping the IAM framework across the group. You will lead a technical team, drive automation, ensure audit readiness, and enforce strict regulatory compliance in a dynamic banking environment.

The role requires 10+ years in application and database security, with 5+ years in a supervisory capacity, and hands-on expertise in IAM/PAM, RBAC, and identity governance.

Qualifications

• Education: Bachelor’s degree or higher in CS/IT/Cybersecurity or related field.
• Experience: 10+ years in Application & Database Security with 5+ years in a supervisory role.
• Certifications (Preferred): CISSP, CISM, CISA, CIAM or equivalent security credentials.

Responsibilities

• Oversee end-to-end user access management across enterprise apps and databases per access control matrices.
• Govern privileged/ elevated IDs; conduct periodic access reviews and housekeeping to remove dormant accounts and redundant permissions.
• Oversee SoD controls and access for BCP/DRP exercises.
• Drive IAM automation to streamline provisioning and deprovisioning; deploy PAM solutions and modern IAM tools.
• Implement automated monitoring and continuous compliance controls across enterprise systems.
• Lead risk assessments for new IT projects and embed proper access controls from design to deployment.
• Establish continuous self-audit and security verification; maintain audit readiness for internal/external/regulatory assessments.
• Provide leadership, coaching, and strategic direction to a team of managers, engineers, and staff.

Skills

Identity governance

PAM

RBAC

Audit & compliance

Team leadership

Problem solving

Communication

Education

Bachelor's degree or higher diploma in CS/IT/Cybersecurity

Job description

Overview

If you are looking to excel and make a difference, take a closer look at us… The Access Management Lead oversees the IT Application and Database Security Section for Hong Leong Group. This role is responsible for driving the strategic direction, operational performance, and modernization of the group’s Identity and Access Management enterprise framework. The successful candidate will lead a high performing technical team, automate operational workflows, maintain robust audit preparedness, and ensure strict compliance with internal policies and regulatory standards.

Responsibilities

Operational Excellence & Access Management: Oversee and administer end-to-end user access management across enterprise applications and databases based on approved access control matrices. Control, monitor, and enforce continuous governance over sensitive, privileged, and elevated user IDs in Development and Production environments. Conduct periodic access reviews and housekeeping to proactively eliminate dormant accounts, redundant permissions, and toxic segregation-of-duties (SoD) combinations. Oversee logical access security for Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) exercises.

Automation & Modernization: Drive IAM task automation to eliminate manual access provisioning/deprovisioning, operational bottlenecks, and human error. Identify, evaluate, and deploy modern IAM/PAM (Privileged Access Management) solutions and tools to streamline joiner-mover-leaver (JML) workflows. Implement automated monitoring and continuous compliance controls across enterprise systems.

Audit Preparedness, Remediation & Risk Management: Establish and execute a continuous self-audit and security verification program across all applications and databases. Maintain year-round audit readiness for internal, external, and regulatory IT compliance assessments. Review critical audit logs and access trails regularly to detect anomalous activities and policy violations. Lead audit defense and ensure prompt remediation of audit findings and compliance gaps with zero relapse. Participate in new IT and business projects to conduct risk assessments, identify security concerns, and embed proper access controls from design to deployment.

Team Leadership & Resource Management: Provide leadership, coaching, and strategic direction to a team of managers, technical engineers, and support staff. Optimize team resource allocation, task assignments, operational schedules, and project deliverables. Conduct regular performance appraisals, foster professional growth, and mentor team members in technical and security domains. Review and approve operational claims, including overtime, leave applications, mileage, and standby allowances.

Enterprise Collaboration & Governance: Partner closely with IT Infrastructure, Application Owners, and Business Units to resolve complex access issues and maintain business agility. Support Group-wide IT Security strategies, policy enhancements, and regulatory compliance initiatives. Oversee physical access control systems and security standards for Data Center facilities as required.

Skills & Experience We Are Looking For

Education: Bachelor’s Degree or Higher Diploma in Computer Science, Information Technology, Cybersecurity, or a related field.

Certifications (Preferred): CISSP, CISM, CISA, Certified Identity and Access Manager (CIAM), or equivalent security management credentials.

Experience: Minimum of 10+ years of technical experience in Application & Database Security, with at least 5+ years in a supervisory/managerial role within IAM/PAM.

Technical Expertise: Deep knowledge of identity governance, automated lifecycle management, Privileged Access Management (PAM), Role-Based Access Control (RBAC), and audit trail analysis.

Audit & Compliance: Proven track record in handling complex IT audits, regulatory frameworks (e.g. BNM RMiT, MAS, ISO 27001, SOC2), and audit remediation management.

Leadership & People Management: Excellent team leadership, talent development, performance management, and conflict-resolution skills.

Problem Solving & Communication: Strong analytical capabilities combined with clear verbal and written communication skills to articulate technical risks to executive and non-technical stakeholders.

About Hong Leong Bank

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available.

Expanding on our Digital at the Core ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.

Hong Leong Bank ("HLB") stands proudly as a leading financial services institution based in Malaysia, providing a wide range of comprehensive and innovative financial solutions across the region. These services are delivered through both digital and traditional means, via online and mobile banking, as well as our digital branch concept to provide customers with an efficient and seamless experience aided by technology. As the service and financial landscape changes rapidly with the ever-increasing use of technology, staying attuned to customers needs and desires becomes even more critical to HLB’s operations. To stay ahead of these dynamic changes, the Bank has adopted the approach of reimagining banking by embedding digital considerations and customer centricity in every aspect of our operations, from products and services as well as customer care and engagement. HLB’s ethos of being Digital-At-The-Core powered by customers-at-the-forefront will continue to lead us to innovate offerings in line with our aspiration of being a highly digital and innovative financial services organization.