Manager - IT Security

Great Eastern; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Great Eastern Malaysia is seeking a Manager of IT Security to safeguard the organization’s IT environment and regulatory compliance. You will lead cross-functional teams, review firewall rules, harden servers, conduct vulnerability assessments, and monitor cloud posture in AWS/Azure.

The role requires 5–7 years in IT security, relevant certifications, and a proactive, risk-aware mindset. You will collaborate with risk, infrastructure, and project teams to protect customers and partners.

Qualifications

• Bachelor degree in information technology or related field.
• Security certifications such as CISSP, CISM, CCSP are advantageous.
• 5–7 years of IT security experience with cloud, network, and regulatory knowledge.

Responsibilities

• Collaborate with cross-border IT security and related IT teams to build secure network architecture.
• Review firewall requests and optimize firewall rules; coordinate regular reviews.
• Lead server hardening reviews for Windows and Linux per security standards.
• Conduct quarterly and ad hoc vulnerability assessments of infrastructure.
• Monitor AWS/Azure environments for misconfigurations and policy violations.
• Represent Infra Security in Change Approval Committee (CAC) for security implications.
• Assess and manage DLP measures for endpoints and network; coordinate with risk teams.
• Assist Third-Party Review Committee in security evaluations and offboarding data deletion.

Skills

Security team collaboration

Firewall rule optimization

Server hardening (Windows/Linux)

Vulnerability assessment

Cloud posture monitoring (AWS/Azure)

Change management review

DLP management

Third-party security assessment

Education

Bachelor Degree in Information Technology

CISSP

CISM

CCSP

Tools

AWS

Azure

Job description

As Manager of IT Security, the role is pivotal in safeguarding organization information technology environment. The job exists to ensure organization digital world presence remains safe and resilient. The role plays crucial part in protecting business from cyber threats, ensuring compliance with regulations and maintaining the trust of the consumers and partners. The work directly contributes to the uninterrupted operation, growth of organization and align in positioning business for success in increasingly digital world].

• Security Team Player: Collaborate with cross border IT security team and interrelated IT teams (e.g., Infrastructure team, Project team, Technology Risk Team, etc.) to create a robust and secure network architecture.
• Firewall Reviewer: Take charge of reviewing firewall requests and optimizing firewall rules. Involve in coordinating regular reviews to eliminate outdated, not in use, redundant and risky rules.
• Server Hardening Reviewer: Proficiency in Windows and Linux based OS to perform comprehensive assessment and review for server hardening in accordance with organization security standards and assess the exception request accordingly when server deviates from organization security standards. To ensure hardening in line with organization security standards, reducing risks and maintain robust infrastructure.
• Vulnerability Assessment: Conduct quarterly and ad hoc vulnerability assessment on organization infrastructure to proactively identify and mitigate risks.
• Cloud Posture Monitoring: Continuously monitor AWS/Azure environments using cloud native and third-party tools to detect, track and report misconfigurations, policy violations and non-compliant resources.
• Change Reviewer: Represent Infra Security in Change Approval Committee (CAC), reviewing change requests with potential security implications.
• DLP Management: Responsible in assessing and managing DLP measures both for endpoints and network (e.g., cloud storage access). The role includes coordination with Technology Risk Management team, configuring and monitoring the access request.
• Third-Party Security Assessment: Assist the Third-Party Review Committee in conducting comprehensive security evaluations prior to onboarding and ensure proper facilitation of data deletion during offboarding.

We are looking for people with

• Possesses Bachelor Degree in Information Technology, and security certification like CISSP, CISM, CCSP are added advantage.
• Minimum 5-7 years of working experience in IT security field and:

1. Familiar about security rules and best practices.
2. Familiar with compute networks, network architecture, security solutions and how to manage them.
3. Knowledgeable in security regulatory, standards and best practices.
4. Knowledgeable in cloud computing.
5. Familiar with OS hardening security controls (Windows and Unix).

• Experience with AWS/Azure cloud platforms.
• Understanding of cloud architecture, IAM, networking and compliance controls.
• Familiarity with cloud security frameworks and posture management tools.
• Good at problem solving skills with risk and compliance mindset.
• Takes full responsibility on the work, easily adaptable to company environment and work well with others especially across team function and sections.

How you succeed

• Champion and embody our Core Values in everyday tasks and interactions.
• Demonstrate high level of integrity and accountability.
• Take initiative to drive improvements and embrace change.
• Take accountability of business and regulatory compliance risks, implementing measures to mitigate them effectively.
• Keep abreast with industry trends, regulatory compliance, and emerging threats and technologies to understand and highlight potential concerns/ risks to safeguard our company proactively.

Who we are

Founded in 1908, Great Eastern is a well-established market leader and trusted brand in Singapore and Malaysia. With over S$100 billion in assets and more than 16 million policyholders, including 12.5 million from government schemes, it provides insurance solutions to customers through three successful distribution channels – a tied agency force, bancassurance, and financial advisory firm Great Eastern Financial Advisers. The Group also operates in Indonesia and Brunei.

The Great Eastern Life Assurance Company Limited and Great Eastern General Insurance Limited have been assigned the financial strength and counterparty credit ratings of "AA-" by S&P Global Ratings since 2010, one of the highest among Asian life insurance companies. Great Eastern's asset management subsidiary, Lion Global Investors Limited, is one of the leading asset management companies in Southeast Asia.

Great Eastern is a subsidiary of OCBC, the longest established Singapore bank, formed in 1932. It is the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s and AA- by both Fitch and S&P. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.

To all recruitment agencies:

Great Eastern does not accept unsolicited agency resumes. Please do not forward resumes to our email or our employees. We will not be responsible for any fees related to unsolicited resumes.