Network Security Governance Manager - Banking Compliance

Hong Leong Bank Berhad; Petaling Jaya; On-site; MYR 180,000 - 280,000; Full time

Job summary

Hong Leong Bank Berhad is seeking a Technical Governance Manager specializing in Network Security Controls to oversee policy, compliance, and risk management for the bank’s perimeter defenses. You will define security standards, ensure proper rule justification, and drive audits and remediation across WAF, proxies, VPNs, and NAC systems.

Responsibilities include aligning with NIST, PCI-DSS, ISO/IEC 27001, and SOC 2; managing governance for WAF rule sets, SSL/TLS policies, and 802.1X NAC; and

Qualifications

• 5+ years in cybersecurity, technical risk, or IT audit.
• Deep knowledge of firewall, WAF, proxies, and VPN platforms.
• Experience auditing or defining policies with Cisco ISE.
• Familiarity with regulatory banking requirements (PCI-DSS, etc.).

Responsibilities

• Define and maintain technical security standards aligned with NIST, PCI-DSS, ISO/IEC 27001, SOC 2, CIS Benchmarks.
• Review and update policies for WAFs, proxies, VPNs, and NAC systems.
• Lead readiness for audits and track remediation of findings and vulnerabilities.
• Report KRIs on control effectiveness to management.
• Govern WAF deployments, rule tuning, and API security baselines.
• Audit Cisco ISE architectures for enterprise WiFi security and network access.
• Oversee firewall rule lifecycle and proxy content filtering governance.
• Ensure VPN configurations and MFA align with Zero Trust principles.

Skills

Firewall architectures

WAF & proxy governance

VPN security & NAC

Zero Trust

Regulatory compliance

Security policy engineering

Auditing & remediation

Risk assessment

Education

Bachelor's degree in cybersecurity

Tools

Cisco ISE

NSPM tools

SSL/TLS inspection tooling

Job description

Hong Leong Bank Berhad is seeking a Technical Governance Manager specializing in Network Security Controls to oversee policy, compliance, and risk management for the bank’s perimeter defenses. You will define security standards, ensure proper rule justification, and drive audits and remediation across WAF, proxies, VPNs, and NAC systems.

Responsibilities include aligning with NIST, PCI-DSS, ISO/IEC 27001, and SOC 2; managing governance for WAF rule sets, SSL/TLS policies, and 802.1X NAC; and