Senior Manager, Information Security

Prudential Services Asia; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Prudential Services Asia in Kuala Lumpur seeks a senior information security leader to drive the organization’s security initiatives, aligned with global frameworks and local regulatory requirements.

You will oversee risk assessments, audits, incident response, threat management, and security design reviews for applications and infrastructure, while guiding cyber resilience and business continuity.

Qualifications

• Minimum tertiary education. Professional certification such as CISM, CISSP is desired but not a must.
• 8–10 years of relevant experience in information security or cybersecurity roles.
• Strong understanding of key security frameworks and standards including NIST CSF, ISO/IEC 27001, CIS Critical Security Controls; familiar with local regulatory requirements such as BNM RMiT, BNM MCIPD, PCI DSS.

Responsibilities

• Provides local leadership to drive the implementation of information security initiatives, aligned with Group directives, industry frameworks and regulatory requirements.
• Identify, assess and manage information security and cybersecurity risks, ensuring appropriate mitigation measures are implemented.
• Support security related internal and external audits, ensuring timely remediation and closure of findings.
• Oversee security monitoring, incident response and threat management capabilities.
• Drive the implementation of security improvement projects and initiatives to strengthen the organization’s security posture.
• Review and approve secure design and deployment of applications and infrastructure in line with security standards.
• Provide security advisory and guidance to support transformation initiatives and operations.
• Support cyber resilience and business continuity initiatives.
• Provide security insights to support management in risk-based decision making.
• Drive continuous improvement of security controls and awareness across the organization.

Skills

Security leadership

Risk management

Audit support

Threat intelligence

SIEM

EDR

DLP

IAM

NIST

ISO 27001

PCI DSS

Education

Bachelor's degree or higher

Tools

SIEM

EDR

DLP

IAM

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed. The incumbent is responsible to deliver exceptional PRUexperience service that sets us apart and make customer service a strategic advantage:

• Implement tools, technologies, and other countermeasures that can be used to protect information, especially from exterior threats on actionable assets that will drive continuous growth and improvement of end-to-end customer experiences;
• Adopt master data management platforms for 7-sisters data sets
• Data strategy, policies and alignment of regional processes with local business units are implemented accordingly
• Protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integrity, and availability

KEY RESPONSIBILITIES

• Provides local leadership to drive the implementation of the organization’s information security initiatives, aligned with Group directives, industry frameworks and applicable regulatory requirements (i.e BNM RMiT, BNM MCIPD, NIST, PDPA, PCI DSS).
• Identify, assess and manage information security and cybersecurity risks, ensuring appropriate mitigation measures are implemented.
• Support security related internal and external audits, ensuring timely remediation and closure of findings.
• Oversee security monitoring, incident response and threat management capabilities, ensuring effective detection, escalation and response of security incidents.
• Drive the implementation of security improvement projects and initiatives to strengthen the organization’s security posture.
• Review and approve secure design and deployment of applications and infrastructure in line with security standards.
• Provide security advisory and guidance to support the organization’s transformation initiatives and business-as-usual operations.
• Support cyber resilience and business continuity initiatives.
• Provide security insights to support management in risk-based decision making.
• Drive continuous improvement of security controls, processes and awareness across the organization.

QUALIFICATIONS & REQUIREMENTS

1. a. Qualifications Minimum tertiary education. Professional certification such as CISM, CISSP is desired but not a must.
2. b. Experience Minimum 8-10 years of relevant experience in information security or cybersecurity roles. Proven track record in driving and delivering security initiatives to strengthen the organization’s security posture.
3. c. Knowledge Possess a strong understanding of key security frameworks and standards including NIST Cybersecurity Framework, ISO/IEC 27001, CIS Critical Security Controls, as well as applicable local regulatory requirements such as BNM RMiT, BNM MCIPD, and PCI DSS Demonstrate knowledge of threat intelligence and assessment Familiar with security tools and their core functionalities support effective security monitoring and incident response, including SIEM, EDR, DLP and IAM Possess strong understanding and practical application of security controls aligned with the organization’s risk appetite, internal policies and standards and regulatory requirements

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements. We are Prudential. For every life, we are partners. For every future, we are protectors.

Prudential plc provides life and health insurance and asset management to 17 million customers across 20 markets in Asia and Africa. We are headquartered in Hong Kong and have dual primary listings on the Stock Exchange of Hong Kong and the London Stock Exchange. We are focused on four strategic regions: Greater China, ASEAN, India and Africa. Our customers are served by around 55,000 agents and more than 200 bank partners. Prudential plc is not affiliated in any manner with Prudential Financial, Inc., a company whose principal place of business is in the United States of America or with the Prudential Assurance Company, a subsidiary of M&G plc, a company incorporated in the United Kingdom. Find out more at www.prudentialplc.com Follow us on LinkedIn