Senior Information Security Officer (Malaysia/APAC)

Joinimagine; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Allianz Technology Malaysia seeks an Information Security Officer to lead the local information security program and align with regional and global teams. You will oversee ISMS activities, risk assessment, remediation, and compliance with group standards and regulatory requirements.

The role requires 5+ years in information security, strong knowledge of ISO27001/ COBIT2019, and experience with outsourcing and supplier management.

Qualifications

• 5+ years of information security experience and/or risk management.
• Strong knowledge of ISO270xx, COBIT2019 and related standards.
• Experience with supplier management and IT outsourcing.
• Proven track record in people and project management.
• Desirable certifications: CISM/CISSP; ISO27001 Lead Implementer/Auditor.

Responsibilities

• Oversee the Information Security function in Malaysia and liaise with regional and central Information Security Teams.
• Oversee the implementation of and compliance with Group-wide standards, regulatory requirements and industry security standards in all Allianz Technology services and in projects.
• Lead local Information Security Steering Boards and support preparation of Information Security action plans.
• Support regional and local executive body in their regulatory Information Security-related governance requirements and their responsibility to set up sound organizational and operational structures and procedures.
• Support the implementation of Group-wide IS framework, regulatory requirements and industry security standards in all Allianz Technology services and in projects; oversee the compliance reporting process for local entities; assess and address deviations from security policies and contractual security provisions, as well as developing effective strategies to mitigate identified information security risks.
• Serve as central contact person for information security-related matters in Malaysia, including interfaces to business, partners, customers and other safeguarding functions.
• Provide information security consulting and liaison with all relevant stakeholders.
• Ensure the effective implementation of Information Security principles and procedures during the full-service life cycle of services offered by Allianz Technology, including those provided by external parties and outsourcing partners.
• Systematically assess the effectiveness of security controls in all services provided by Allianz Technology, its partners and third-party providers.
• Security Risk Management, including supporting the life cycle of security risk assessments, assessing and addressing deviations from security policies and contractual security provisions, as well as developing effective strategies to mitigate identified information security risks.
• Regularly exchange with and contribute to the regional and global Allianz Technology ISO community.
• Promote knowledge and awareness of Allianz Technology security requirements and processes.
• Contribute to defining contractual security provisions in the context of third-party management.
• Support the annual compliance reporting process for the local entity.
• Support local management in their regulatory Information Security-related governance requirements.

Skills

InfoSec experience

Risk management

IT security knowledge

Supplier management

People management

Project management

Education

University degree

Job description

Allianz Technology Malaysia seeks an Information Security Officer to lead the local information security program and align with regional and global teams. You will oversee ISMS activities, risk assessment, remediation, and compliance with group standards and regulatory requirements.

The role requires 5+ years in information security, strong knowledge of ISO27001/ COBIT2019, and experience with outsourcing and supplier management.