Senior Manager & CyberSecurity (Endpoint)

HFG (Hong Kong) Limited; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

A leading financial services firm in Kuala Lumpur seeks an experienced IT Security Engineer to manage and engineer endpoint protection solutions, including Microsoft Defender and CrowdStrike Falcon. Candidates should have at least 8 years of experience in IT Security Management, with a strong focus on delivering security projects and leading initiatives. The role involves automation using scripting languages and defining compliance policies. The ideal candidate will possess excellent communication skills and a relevant degree.

Qualifications

• Minimum of 8 years’ experience in IT Security Management, preferably in Financial Services.
• Demonstrated success in delivering endpoint security projects and managing enterprise-grade security solutions.
• Proven track record in designing and implementing endpoint security solutions.

Responsibilities

• Manage endpoint protection solutions, ensuring secure configurations.
• Automate security operations using scripting languages.
• Lead IT Security Engineering initiatives and projects.
• Define and manage device control policies to ensure compliance.

Skills

Endpoint security management

Scripting languages (PowerShell, Python, KQL)

Analytical and problem-solving

Interpersonal and influencing skills

Communication and presentation skills

Education

Bachelor’s degree in Information Technology

Tools

Microsoft Defender for Endpoint

CrowdStrike Falcon

Microsoft Intune

Job description

Manage and engineer endpoint protection solutions, including Microsoft Defender for Endpoint and CrowdStrike Falcon.

Develop, enforce, and maintain endpoint hardening standards, ensuring secure configurations throughout the asset lifecycle.

Align endpoint security initiatives with the broader Information Security strategic roadmap.

Automate security operations using scripting languages (e.g., PowerShell, Python, KQL) to improve efficiency and consistency.

Manage and maintain configuration scanning policies to ensure compliance with CIS Benchmarks and internal hardening standards.

Collaborate with cross-functional teams to deliver endpoint security programs on time and within budget.

Define and manage device control policies, ensuring compliance with regulatory and internal requirements.

Support integration and policy enforcement through platforms such as Microsoft Intune.

Drive successful delivery of network security projects, ensuring alignment with Group Information Security strategies and business objectives.

Build awareness and provide support to Group IT Security, Group IT, and Business Units IT, to ensure understanding of security solutions and processes across the organization.

Lead IT Security Engineering initiatives and projects, including solution selection, architecture definition, operations framework, and continuous improvement.

Collaborate with business units and cross-functional teams to ensure consistent execution of security initiatives.

Partner with the Head of IT Security Engineering and Group CISO to track and report on program progress and risks, providing regular updates to management.

Provide technical leadership and mentorship to junior engineers and project teams.

Continuously evaluate and recommend emerging technologies to strengthen the security landscape.

Experience

Minimum of 8 years’ experience in IT Security Management, preferably within the Financial Services industry.

Demonstrated success in delivering endpoint security projects and managing enterprise-grade security solutions.

Regional exposure in IT Security Technical or Engineering roles.

Strong analytical and problem-solving abilities, with a proactive and collaborative mindset.

Bachelor’s degree in Information Technology or a related discipline.

Knowledge & Technical Skills

Hands‑on technical expertise across the NIST Cybersecurity Framework domains: Identify, Protect, Detect, Respond, and Recover.

Good understanding of cloud environments and how networks operate within cloud architectures.

Relevant Information and Cloud certifications; CISSP (or equivalent) is an advantage.

Proficiency in scripting and automation tools to streamline security operations.

Proven track record in designing and implementing endpoint security solutions.

Strong interpersonal and influencing skills to drive adoption and enforcement of IT Security Engineering programs.

Excellent communication and presentation skills for engaging with stakeholders at all levels.