Senior Information Security Specialist | Kuala Lumpur, MY

Allianz; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Allianz is seeking a Senior Information Security Specialist in Kuala Lumpur. This role will focus on ensuring information security and business continuity strategies are effectively implemented across Allianz entities. Candidates should have extensive experience in cybersecurity and governance, along with strong regulatory knowledge and technical expertise. Join a diverse and inclusive workplace committed to employee growth and empowerment.

Qualifications

• Minimum 10 years in business continuity planning/management.
• At least 5 years in cybersecurity and information security governance.
• Proven track record in leading BCM exercises.

Responsibilities

• Formulate and implement the information security strategy.
• Develop and implement a robust BCM program.
• Oversee outsourcing process compliance.

Skills

Information Security

Business Continuity

Outsourcing Risk Management

Tools

ISO 27001

COBIT

Job description

Allianz Services is part of Allianz Group, one of the world's leading insurers and asset managers and has succeeded in becoming one individual business segment by combining various businesses from different parent companies. Allianz Services is running service delivery operations in Romania, India, Mauritius and Morocco as well as is operating Consulting hubs in Germany, USA, Italy, France and Singapore with almost 6000 colleagues globally.

Senior Information Security Specialist

The Senior Information Security Specialist will be part of the Protection & Resilience team, ensuring Allianz entities are part of the Protection & Resilience team, ensuring Allianz entities are well-prepared regarding Information Security Risk. This role is responsible for overseeing the identification, assessment, and mitigation of risks to ensure smooth operations of entities in Allianz.

The key responsibilities focus on Information Security, Business Continuity, and Outsourcing.

Information Security

• Formulate and implement the information security strategy, risk appetite, policies, and action plans in compliance with Allianz Group standards and regulatory requirements, including MAS, PDPC, and the Cyber Security Agency.

• Identify, analyze, and recommend controls and mitigation measures for identified risks.

• Monitor emerging technologies and trends to assess their impact on the business environment; lead initiatives to address associated risks while ensuring regulatory compliance.

• Ensure the confidentiality, integrity, and availability of systems while managing information security incidents and crises.

• Promote a culture of awareness to foster sustainable information security practices.

• Collaborate with IT, Risk, Compliance, and Business teams to integrate security requirements into all projects.

Business Continuity Management (BCM)

• Develop and implement a robust BCM program aligned with group and regulatory requirements to address emerging risks.

• Lead BCM exercises and guide Crisis Management Team members in responding to crisis scenarios.

• Identify risks and controls related to BCM through regular exercises and testing.

• Oversee BCM reporting to local regulators, the OE Board of Management, and Allianz's Regional and Global Teams.

• Support and coordinate BCM initiatives by working closely with business owners to monitor and address critical processes.

• Conduct reviews and self-assessments, presenting findings to committees and driving the implementation of corrective action plans.

• Serve as the interface for BCM-related matters with Operational Risk Management, Group Security Offices, and external working groups.

Outsourcing Management

• Oversee the implementation of the outsourcing process in accordance with Allianz Group and local policies.

• Ensure compliance with local outsourcing regulations and enforce Allianz's outsourcing policy standards.

Experience

• Minimum of 10 years in business continuity planning/management and IT security, with at least 5 years in cybersecurity and information security governance.
• At least 3 years of experience in outsourcing risk management, preferably in the financial sector.
• Proven track record in leading and facilitating BCM exercises, including Industry-Wide Exercises.

Technical Expertise:

• Familiarity with security frameworks such as ISO 27001, COBIT, CIS Top 20, and NIST.

• Strong knowledge of technical IT and security concepts, including Active Directory, DNS, firewalls, networking, Web Application Firewalls, DLP, and IPS/IDS.

• Practical experience in risk management, change management, and incident management processes.

• Familiarity with the Secure Software Development Lifecycle (DevSecOps).

Regulatory Knowledge:

• Strong understanding of local outsourcing regulations and MAS guidelines is highly preferred.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

We at Allianz believe in a diverse and inclusive workforce and are proud to be an equal opportunity employer. We encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love or what you believe in.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, disability or sexual orientation.

Great to have you on board. Let's care for tomorrow.

Boost your career

Find thousands of job opportunities by signing up to eFinancialCareers today.