IAM Lead – IT Application & Database Security

Hong Leong Bank Berhad; Selangor; On-site; MYR 250,000 - 420,000; Full time

Job summary

Hong Leong Bank Berhad is seeking an Access Management Lead to drive the IAM program, optimize privileged access controls, and lead a team of security professionals. The role emphasizes automation, audit readiness, and enterprise governance to ensure compliant and secure access across applications and databases.

The candidate will shape security strategies, oversee incident and risk management, and partner with multiple IT and business units to embed access controls from design to deployment.

Qualifications

• Minimum of 10+ years of technical experience in Application & Database Security.
• At least 5+ years in a supervisory/managerial role within IAM/PAM.
• Deep knowledge of identity governance, PAM, RBAC, and audit trail analysis.
• Experience with IT audits and regulatory frameworks (BNM RMiT, MAS, ISO27001, SOC2).
• Strong leadership, communication, and stakeholder management abilities.

Responsibilities

• Oversee end-to-end access management across enterprise apps and databases.
• Automate provisioning/deprovisioning and optimize JML workflows.
• Lead audit readiness and remediation for compliance gaps.
• Coach and develop a high-performing security team.
• Collaborate with IT Infra, owners, and business units to maintain governance.

Skills

Identity governance

PAM

RBAC

Audit trail analysis

Team leadership

Communication skills

Education

Bachelor’s Degree or Higher Diploma in Computer Science/IT/Cybersecurity

CISSP

CISM

CISA

CIAM (Certified Identity and Access Manager)

Job description

If you are looking to excel and make a difference, take a closer look at us…

Overview

The Access Management Lead oversees the IT Application and Database Security Section for Hong Leong Group. This role is responsible for driving the strategic direction, operational performance, and modernization of the group’s Identity and Access Management enterprise framework. The successful candidate will lead a high performing technical team, automate operational workflows, maintain robust audit preparedness, and ensure strict compliance with internal policies and regulatory standards.

Responsibilities

Operational Excellence & Access Management

• Oversee and administer end-to-end user access management across enterprise applications and databases based on approved access control matrices.
• Control, monitor, and enforce continuous governance over sensitive, privileged, and elevated user IDs in Development and Production environments.
• Conduct periodic access reviews and housekeeping to proactively eliminate dormant accounts, redundant permissions, and toxic segregation-of-duties (SoD) combinations.
• Oversee logical access security for Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) exercises.

Automation & Modernization

• Drive IAM task automation to eliminate manual access provisioning/deprovisioning, operational bottlenecks, and human error.
• Identify, evaluate, and deploy modern IAM/PAM (Privileged Access Management) solutions and tools to streamline joiner-mover-leaver (JML) workflows.
• Implement automated monitoring and continuous compliance controls across enterprise systems.

Audit Preparedness, Remediation & Risk Management

• Establish and execute a continuous self-audit and security verification program across all applications and databases.
• Maintain year-round audit readiness for internal, external, and regulatory IT compliance assessments.
• Review critical audit logs and access trails regularly to detect anomalous activities and policy violations.
• Lead audit defense and ensure prompt remediation of audit findings and compliance gaps with zero relapse.
• Participate in new IT and business projects to conduct risk assessments, identify security concerns, and embed proper access controls from design to deployment.

Team Leadership & Resource Management

• Provide leadership, coaching, and strategic direction to a team of managers, technical engineers, and support staff.
• Optimize team resource allocation, task assignments, operational schedules, and project deliverables.
• Conduct regular performance appraisals, foster professional growth, and mentor team members in technical and security domains.
• Review and approve operational claims, including overtime, leave applications, mileage, and standby allowances.

Enterprise Collaboration & Governance

• Partner closely with IT Infrastructure, Application Owners, and Business Units to resolve complex access issues and maintain business agility.
• Support Group-wide IT Security strategies, policy enhancements, and regulatory compliance initiatives.
• Oversee physical access control systems and security standards for Data Center facilities as required.

Skills & Experience We Are Looking For

• Education: Bachelor’s Degree or Higher Diploma in Computer Science, Information Technology, Cybersecurity, or a related field.
• Certifications (Preferred): CISSP, CISM, CISA, Certified Identity and Access Manager (CIAM), or equivalent security management credentials. Experience & Skills
• Experience: Minimum of 10+ years of technical experience in Application & Database Security, with at least 5+ years in a supervisory/managerial role within IAM/PAM.
• Technical Expertise: Deep knowledge of identity governance, automated lifecycle management, Privileged Access Management (PAM), Role-Based Access Control (RBAC), and audit trail analysis.
• Audit & Compliance: Proven track record in handling complex IT audits, regulatory frameworks (e.g., BNM RMiT, MAS, ISO 27001, SOC2), and audit remediation management.
• Leadership & People Management: Excellent team leadership, talent development, performance management, and conflict-resolution skills.
• Problem Solving & Communication: Strong analytical capabilities combined with clear verbal and written communication skills to articulate technical risks to executive and non-technical stakeholders.

For more job opportunities, please go to HLB Careers: https://hlb.wd3.myworkdayjobs.com/HLBCareers/

We appreciate your application and will be in touch with shortlisted candidates regarding next steps.

About Hong Leong Bank

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our “Digital at the Core” ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life‑long learning, achieve their career aspirations and grow talent from within our organisation.

Realise your full potential at Hong Leong Bank by applying now.