IAM Lead – IT Application & Database Security

Hong Leong Bank; Petaling Jaya; On-site; MYR 180,000 - 320,000; Full time

Job summary

Hong Leong Bank is seeking an IAM Lead to oversee the IT Application and Database Security section, directing strategy, operations, and modernization of the enterprise IAM framework.

You will lead a technical team, automate provisioning and deprovisioning, ensure audit readiness, and enforce strict access controls across enterprise apps and databases, with a focus on risk management and regulatory compliance.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• Experience in IAM/PAM and regulatory compliance preferred.
• Strong leadership and communication skills.

Responsibilities

• Oversee end-to-end user access management across applications and databases.
• Enforce governance over privileged IDs in Dev/Prod environments.
• Conduct periodic access reviews and remove dormant accounts and SoD conflicts.
• Oversee BCP/DRP-related access security exercises.
• Drive automation to provisioning/deprovisioning and deploy PAM solutions.
• Establish continuous audit readiness and remediation across systems.
• Lead risk assessments for new IT projects and embed access controls.
• Provide leadership and strategic direction to security teams; manage performance.

Skills

Identity governance

Privileged Access Management

RBAC

Audit trail analysis

Regulatory compliance

Team leadership

Education

Bachelor's Degree in Computer Science/IT/Cybersecurity

Tools

IAM platforms

Job description

## IAM Lead – IT Application & Database SecurityApply: PJC-PJ City: Full time: Posted Today: End Date: December 28, 2026 (30+ days left to apply): JR0000026424**If you are looking to excel and make a difference, take a closer look at us...****Overview:**The Access Management Lead oversees the IT Application and Database Security Section for Hong Leong Group. This role is responsible for driving the strategic direction, operational performance, and modernization of the group’s Identity and Access Management enterprise framework. The successful candidate will lead a high performing technical team, automate operational workflows, maintain robust audit preparedness, and ensure strict compliance with internal policies and regulatory standards. **Responsibilities:** ***Operational Excellence & Access Management:**** Oversee and administer end-to-end user access management across enterprise applications and databases based on approved access control matrices.* Control, monitor, and enforce continuous governance over sensitive, privileged, and elevated user IDs in Development and Production environments.* Conduct periodic access reviews and housekeeping to proactively eliminate dormant accounts, redundant permissions, and toxic segregation-of-duties (SoD) combinations.* Oversee logical access security for Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) exercises. ***Automation & Modernization:**** Drive IAM task automation to eliminate manual access provisioning/deprovisioning, operational bottlenecks, and human error.* Identify, evaluate, and deploy modern IAM/PAM (Privileged Access Management) solutions and tools to streamline joiner-mover-leaver (JML) workflows.* Implement automated monitoring and continuous compliance controls across enterprise systems. ***Audit Preparedness, Remediation & Risk Management:**** Establish and execute a continuous self-audit and security verification program across all applications and databases.* Maintain year-round audit readiness for internal, external, and regulatory IT compliance assessments.* Review critical audit logs and access trails regularly to detect anomalous activities and policy violations.* Lead audit defense and ensure prompt remediation of audit findings and compliance gaps with zero relapse.* Participate in new IT and business projects to conduct risk assessments, identify security concerns, and embed proper access controls from design to deployment.***Team Leadership & Resource Management:**** Provide leadership, coaching, and strategic direction to a team of managers, technical engineers, and support staff.* Optimize team resource allocation, task assignments, operational schedules, and project deliverables.* Conduct regular performance appraisals, foster professional growth, and mentor team members in technical and security domains.* Review and approve operational claims, including overtime, leave applications, mileage, and standby allowances. ***Enterprise Collaboration & Governance:**** Partner closely with IT Infrastructure, Application Owners, and Business Units to resolve complex access issues and maintain business agility.* Support Group-wide IT Security strategies, policy enhancements, and regulatory compliance initiatives.* Oversee physical access control systems and security standards for Data Center facilities as required. **Skills & Experience We Are Looking For:** * Education: Bachelor’s Degree or Higher Diploma in Computer Science, Information Technology, Cybersecurity, or a related field.* Certifications (Preferred): CISSP, CISM, CISA, Certified Identity and Access Manager (CIAM), or equivalent security management credentials. Experience & Skills* Experience: Minimum of 10+ years of technical experience in Application & Database Security, with at least 5+ years in a supervisory/managerial role within IAM/PAM.* Technical Expertise: Deep knowledge of identity governance, automated lifecycle management, Privileged Access Management (PAM), Role-Based Access Control (RBAC), and audit trail analysis.* Audit & Compliance: Proven track record in handling complex IT audits, regulatory frameworks (e.g., BNM RMiT, MAS, ISO 27001, SOC2), and audit remediation management.* Leadership & People Management: Excellent team leadership, talent development, performance management, and conflict-resolution skills.* Problem Solving & Communication: Strong analytical capabilities combined with clear verbal and written communication skills to articulate technical risks to executive and non-technical stakeholders.