Information Security Officer_2758

Allianz Technology; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Allianz Technology Malaysia is seeking an Information Security Officer to safeguard the information security environment for Allianz businesses in Malaysia. The role includes ISMS oversight, risk identification, assessment, prevention and remediation, with a direct reporting line to the APAC ISO and Allianz Technology Malaysia Head of IT.

The ISO will advise regional management and local functions on information security risk areas, lead IS governance, and coordinate with third-party providers

Qualifications

• 5+ years in information security or risk management.
• Strong knowledge of ISO270xx, COBIT2019 and local regulatory standards.
• Experience with supplier management, IT outsourcing and cloud providers.
• Proven leadership or project management in complex enterprise environments.
• Certifications such as CISM or CISSP; ISO27001 Lead Implementer/Auditor preferred.

Responsibilities

• Oversee Information Security function in Malaysia and liaise with regional and central teams.
• Ensure compliance with Group-wide standards, regulatory requirements and industry security standards.
• Lead local Information Security Steering Boards and support action plans.
• Support governance requirements and establish sound organizational and operational structures.

Skills

InfoSec knowledge

Supplier management

Leadership

Risk management

CISM/CISSP

Education

CS or related degree

Job description

Job Purpose/Role

The Information Security Officer (ISO) Malaysia is a key role within Allianz Technology’s global IS organization. The ISO is accountable for the information security of the environment supporting the Allianz businesses in Malaysia, including oversight of related ISMS activities, risk identification, assessment, prevention, and remediation. The ISO (Malaysia) provides advice to regional management as well as to the local Allianz Technology Malaysia Functions with respect to Information Security risk areas, including services provided by third parties. In his/her function, the ISO will be instrumental in building up and integrating IS assurance capabilities and has a direct functional reporting line to the Allianz Technology Malaysia Heat of IT as well as the APAC Regional ISO.

Key Responsibilities

• Oversee the Information Security function in Malaysia and liaise with regional and central Information Security Teams.
• Oversee the implementation of and compliance with Group-wide standards, regulatory requirements and industry security standards in all Allianz Technology services and in projects.
• Lead local Information Security Steering Boards and support preparation of Information Security action plans.
• Support regional and local executive body in their regulatory Information Security‑related governance requirements and their responsibility to set up sound organizational and operational structures and procedures.
• Support the implementation of Group‑wide IS framework, regulatory requirements and industry security standards in all Allianz Technology services and in projects; oversee the compliance reporting process for local entities; assess and address deviations from security policies and contractual security provisions, as well as developing effective strategies to mitigate identified information security risks.
• Serve as central contact person for information security‑related matters in Malaysia, including interfaces to business, partners, customers and other safeguarding functions.
• Provide information security consulting and liaison with all relevant stakeholders.
• Ensure the effective implementation of Information Security principles and procedures during the full‑service life cycle of services offered by Allianz Technology, including those provided by external parties and outsourcing partners.
• Systematically assess the effectiveness of security controls in all services provided by Allianz Technology, its partners and third‑party providers.
• Security Risk Management, including supporting the life cycle of security risk assessments, assessing and addressing deviations from security policies and contractual security provisions, as well as developing effective strategies to mitigate identified information security risks.
• Regularly exchange with and contribute to the regional and global Allianz Technology ISO community.
• Promote knowledge and awareness of Allianz Technology security requirements and processes.
• Contribute to defining contractual security provisions in the context of third‑party management.
• Support the annual compliance reporting process for the local entity.
• Support local management in their regulatory Information Security‑related governance requirements.

Key Requirements/Skills/Experience

• University degree in computer science, natural sciences etc. or equivalent professional experience.
• Long track record of experience in IT, 5 years+ experience in Information Security related fields and/and or risk management.
• Sound knowledge of IT security technology, architecture and processes and profound knowledge of information security management systems and relevant industry standards and control frameworks (in particular ISO270xx, COBIT2019); local regulatory standards.
• Professional experience with supplier management (including Cloud providers), IT outsourcing and relevant control frameworks; track record in defining and monitoring contractual information security provisions.
• Proven track record in people management and/or project management in complex enterprise environments.
• Desirable certifications: CISM/CISSP; ISO27001 Lead Implementer/Auditor.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Great to have you on board. Let’s care for tomorrow.