Security Operations Country Lead

Generali Insurance Malaysia Berhad; Puchong; Sur place; MYR 350 000 - 700 000; Plein temps

Résumé du poste

Generali Insurance Malaysia Berhad is seeking a Security Operations Country Lead to oversee security operations across Asia. You will connect global cyber defence capabilities with regional priorities, directing incident response and driving continuous improvements in security services.

The role combines hands-on security with senior stakeholder leadership to protect infrastructure, cloud platforms, and data while guiding cross-functional teams and external partners across a diverse

Qualifications

• 15+ years in IT and 15+ years in IT security.
• Senior-level experience leading security operations, service delivery, incident management, or major cybersecurity programmes.
• Strong expertise in infrastructure security, security incident management, application security, vulnerability management, and cloud security.
• Broad understanding of enterprise technology environments, including networks, endpoints, applications, cloud platforms, architecture, and data security.
• Experience handling significant security incidents and coordinating technical, business, and executive stakeholders.
• Knowledge of security operations, risk management, service delivery, audit remediation, and control frameworks.
• Familiarity with Asian regulatory environments, such as HKMA, MAS, Malaysia RMiT, Bank of Thailand requirements, and Indonesia’s financial-services regulations, as well as relevant international regulations.
• The ability to translate complex technical topics into clear business decisions and priorities.
• Strong communication, stakeholder management, analytical, and escalation-management skills.
• A degree or diploma in Computer Science, IT, Engineering, or a related discipline, or equivalent professional experience.

Responsabilités

• Lead day-to-day security operations and strengthen the organisation’s first line of defence.
• Coordinate the end-to-end management of cybersecurity incidents, requests, changes, and service issues.
• Direct incident response from detection and containment through recovery, executive communication, root-cause analysis, and post-incident improvement.
• Improve security across infrastructure, networks, endpoints, applications, cloud platforms, data, and privileged access.
• Drive vulnerability management, audit remediation, and the implementation of effective security controls.
• Ensure security tools provide appropriate coverage across in-scope technology assets.
• Use service levels, performance indicators, and risk indicators to improve operational quality and resilience.
• Advise senior stakeholders on security priorities, risks, escalations, and response options.
• Partner with regional and local security leaders, delivery teams, business entities, and external providers.
• Contribute to global security programmes while championing a strong, practical security culture across Asia.

Connaissances

Security leadership

Incident management

Cloud security

Infrastructure security

Stakeholder management

Regulatory knowledge

Cybersecurity governance

Formation

Deg/ Diploma in CS/ IT/ Eng

Outils

Certifications (CISSP/CCSP/CISM)

Description du poste

Take on a high-impact cybersecurity leadership role where you will:

• Shape security operations across Asia, connecting local business needs with a global cyber defence strategy.
• Lead the response to complex security threats, influencing decisions from initial detection through recovery and lessons learned.
• Drive change at scale, strengthening infrastructure, cloud, application, endpoint, and vulnerability security across a diverse international environment.

You will join a collaborative, cross-cultural organisation where your expertise will be visible, your judgement will matter, and your work will directly strengthen operational resilience.

About the Role

As Security Operations Country Lead, you will be the trusted point of contact for security operations across entities in Asia.

You will connect global cyber defence capabilities with regional and local priorities, turning security strategy into effective operational outcomes. Combining hands‑on security expertise with senior stakeholder leadership, you will help teams prevent, manage, and learn from cyber incidents while continuously improving security services.

This is an opportunity to influence at both operational and strategic levels, working across technology, business, risk, audit, and security functions.

What You’ll Do

• Lead day-to-day security operations and strengthen the organisation’s first line of defence.
• Coordinate the end-to-end management of cybersecurity incidents, requests, changes, and service issues.
• Direct incident response from detection and containment through recovery, executive communication, root-cause analysis, and post-incident improvement.
• Improve security across infrastructure, networks, endpoints, applications, cloud platforms, data, and privileged access.
• Drive vulnerability management, audit remediation, and the implementation of effective security controls.
• Ensure security tools provide appropriate coverage across in-scope technology assets.
• Use service levels, performance indicators, and risk indicators to improve operational quality and resilience.
• Advise senior stakeholders on security priorities, risks, escalations, and response options.
• Partner with regional and local security leaders, delivery teams, business entities, and external providers.
• Contribute to global security programmes while championing a strong, practical security culture across Asia.

What You’ll Bring

• Extensive experience in IT and cybersecurity, ideally including 15+ years in IT and 15+ years in IT security.
• Senior-level experience leading security operations, service delivery, incident management, or major cybersecurity programmes.
• Strong expertise in infrastructure security, security incident management, application security, vulnerability management, and cloud security.
• Broad understanding of enterprise technology environments, including networks, endpoints, applications, cloud platforms, architecture, and data security.
• Experience handling significant security incidents and coordinating technical, business, and executive stakeholders.
• Knowledge of security operations, risk management, service delivery, audit remediation, and control frameworks.
• Familiarity with Asian regulatory environments, such as HKMA, MAS, Malaysia RMiT, Bank of Thailand requirements, and Indonesia’s financial-services regulations, as well as relevant international regulations.
• The ability to translate complex technical topics into clear business decisions and priorities.
• Strong communication, stakeholder management, analytical, and escalation-management skills.
• A degree or diploma in Computer Science, IT, Engineering, or a related discipline, or equivalent professional experience.

What Will Make You Stand Out

• Recognised certifications such as CISSP, CCSP, CISM, CISA, CEH, GCIH, GCIA, or OSCP.
• Experience leading audit remediation and security risk-reduction programmes.
• Practical knowledge across several of the following areas:
• Firewalls, intrusion prevention, DDoS protection, secure web access, email security, and web application firewalls
• Endpoint protection, EDR, anti-malware, and data loss prevention
• SIEM, security monitoring, incident handling, and response
• Secure architecture, secure SDLC, SAST, and DAST
• IaaS and PaaS security, cloud compliance, data security, and DevSecOps
• The confidence to operate independently while succeeding in a complex, international matrix organisation.
• A customer-focused mindset and the ability to build trust across different cultures, disciplines, and levels of seniority.

What We Offer

• A highly visible leadership role with regional and global influence.
• The opportunity to shape security operations across a diverse Asian business landscape.
• Exposure to complex, business-critical cybersecurity challenges.
• Close collaboration with global cyber defence teams, local security leaders, technology specialists, and senior decision-makers.
• Opportunities to expand your leadership capability and deepen your expertise across infrastructure, cloud, application security, incident response, and cyber resilience.
• An international environment that values collaboration, autonomy, continuous learning, and practical innovation.
• The chance to make a measurable contribution to protecting customers, colleagues, technology, and business operations.

Diversity & Inclusion Statement

We believe stronger security is built by teams with different experiences, perspectives, and ways of thinking. We welcome applications from people of all backgrounds and are committed to providing an inclusive, respectful, and accessible recruitment experience.

If you are excited by the opportunity but do not meet every listed qualification, we still encourage you to apply. Your experience and potential may be exactly what the team needs.