Senior IT Security Specialist, Security Assurance

RHB Bank Berhad; Malaysia; On-site; MYR 240,000 - 360,000; Full time

Job summary

RHB Bank Berhad is seeking a Senior IT Security Lead to provide leadership and strategic oversight across security assurance, system hardening, ISO 27001, and governance. You will mentor teams, align security architecture with corporate strategy, and drive risk-based decision making.

The role encompasses security monitoring, cloud/app security configurations, audit coordination, and collaboration with project teams to ensure secure delivery.

Job description

Leadership and Strategic Oversight

• Mentor a team of IT Security Assurance
• Assist section head to define and maintain the security advisory and risk assessment framework aligned with corporate cybersecurity strategy.

System Hardening and Configuration Compliance

• Review and validate operating system hardening configurations for Windows and Linux servers and others as listed in List of Technologies.
• Assess database security configurations and hardening controls for enterprise databases.
• Validate application security configurations and adherence to secure configuration standards.
• Review network device hardening, including firewalls, routers, switches, load balancers, and web application firewalls.
• Assess cloud security configurations and ensure compliance with approved cloud security baselines like Dockers,S3 Bucket , AzureDocDB and others.
• Verify compliance with hardening standards, benchmarks, and security best practices.
• Conduct periodic hardening and Adhoc QA scan and identify configuration weaknesses.
• Ensure security patches and configuration updates are implemented according to organizational requirements.
• Report significant risks and mitigation progress to senior management and governance committees.

ISO 27001 Certification and ISMS Management

• Lead the ISO 27001 certification and maintenance process, ensuring continuous compliance of the Information Security Management System (ISMS).
• Coordinate internal and external audits, managing relationships with auditors and certification bodies.
• Ensure risk assessments, Statement of Applicability (SoA), and ISMS documentation remain current and aligned with evolving business and regulatory requirements.
• Track and manage audit nonconformities, corrective action plans, and improvement initiatives.

Security Assurance

• Conduct security risk assessments and identify security gaps, vulnerabilities, and control deficiencies.
• Validate implementation of security controls, including authentication, authorization, logging, monitoring, and encryption.
• Support security governance initiatives and provide recommendations to mitigate identified risks.
• Review and track security findings, risk exceptions, and remediation activities.
• Provide security assurance and approval prior to production deployment.
• Collaborate with project teams, infrastructure teams, developers, and security stakeholders to ensure security requirements are addressed.

Mobile Apps Security

• Perform security assessments of Android and iOS mobile applications.
• Coordinate and review third-party risk assessments and recommend mobile configuration.

Operational Excellence Monitor performance, completeness and effectiveness of all managed security tools and controls.

• Implement automation and process improvement to reduce operational overhead
• Define KPIs and SLAs for tool uptime, incident response and compliance posture.

Governance, Risk, and Compliance

• Ensure all security controls meet internal and external regulatory requirements.
• Own the documentation of policies, procedures, operation manual and security standards related to managed systems
• Assist internal and external audits for the security technologies under this section.
• Drive remediation plans for audit findings and ensure timely closure.

A mantra for our clients, customers, partners and every member of the RHB family. Yes, you. Our employees are one of the reasons we are here today. Dynamic, forward-thinking and progressive, there is a reason why we are an award-winning financial institution. Join us today and be a part of a winning family. At RHB, we take pride in our people and our teams. Great relationships built on trust, a 'leading it right' environment, challenging assignments and a culture of excellence are the pillars to the dynamic and diversified workplace we call home. As we grow towards realising our aspirations, we promise a workplace built on the five pillars – RHB Cares; RHB Leads; RHB Inspires; RHB Progresses; and RHB Rewards.