Security Operations Lead — Threat Detection & Response

Allianz; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

Allianz is seeking a security operations and governance professional in Kuala Lumpur to monitor local security solutions, manage incidents, and coordinate with global teams. You will drive vulnerability management, access reviews, and change control while aligning with IT risk and security frameworks.

You will collaborate with remote teams and vendors, ensuring effective security operations and timely remediation across the RDC estate.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field.
• Proven experience in information security, network security, or a related role.
• Strong understanding of security principles, practices, and technologies.
• Hands‑on experience with security monitoring, SIEM/SOC alert handling and incident response tools and technologies.
• Practical experience with vulnerability scanning and remediation tracking, and with access management / user access reviews (IAM, cloud and WAF platforms).
• Working knowledge of ITIL‑based incident, problem and change management, and comfort operating within a defined RACI across local and central/Group teams.
• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for automation tasks.
• Familiarity with cloud security and security frameworks (e.g., NIST, ISO 27001).
• Strong analytical and problem‑solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Certifications in security or related areas (e.g., CISSP, CEH) are a plus.
• This role may require extended working hours and collaboration with remote teams and vendors.

Responsibilities

• Monitor, operate and maintain the RDC's local security solutions and services; detect and act on security events.
• Triage, investigate and remediate security tickets end to end with IF, ADM and Central teams.
• Own local response to SOC alerts; drive remediation to closure and sign off outcomes.
• Execute vulnerability scans across the RDC estate; coordinate scope with ISO teams.
• Track identified vulnerabilities to closure; report progress to Central AVM Team.
• Prepare, assess and implement security-related changes; sign-off by Head of IS.
• Coordinate local incident and problem management with Central ACDC Team; keep ISO informed.
• Process access requests with IAM teams; run half-yearly access reviews.
• Act as local owner for Group security solutions delivered by Central teams; oversee service adoption.
• Deliver evidence, checks and remediation actions for regulatory, compliance and audit requests.
• Produce recurring and ad-hoc security reporting; maintain runbooks and knowledge base.
• Support security evaluations and penetration testing in collaboration with AZT MY ISO / OE ISO.
• Provide security input and sign-off for PMO-delivered projects and third-party engagements.
• Engage in continuous improvement and keep current with emerging threats and practices.

Skills

Security monitoring

SIEM/SOC

Incident response

Vulnerability scanning

IAM / access reviews

ITIL processes

Scripting (Python/PowerShell)

Cloud security

Security frameworks (NIST/ISO 27001)

Analytical thinking

Communication skills

Teamwork

Security certifications (CISSP/CEH)

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Job description

Allianz is seeking a security operations and governance professional in Kuala Lumpur to monitor local security solutions, manage incidents, and coordinate with global teams. You will drive vulnerability management, access reviews, and change control while aligning with IT risk and security frameworks.

You will collaborate with remote teams and vendors, ensuring effective security operations and timely remediation across the RDC estate.