Senior Manager, Information Security

Prudential Assurance Malaysia Berhad; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Prudential Assurance Malaysia Berhad is seeking an experienced Information Security leader to drive the organization’s security initiatives, risk management, and regulatory compliance across local and regional units.

The role focuses on risk assessment, security architecture, incident response, and continuous improvement of security controls, aligning with NIST, ISO/IEC 27001, and PCI DSS requirements. A strong track record in security leadership is essential.

Qualifications

• Minimum tertiary education.
• 8-10 years of experience in information security or cybersecurity.
• Proven track record delivering security initiatives to strengthen security posture.
• Knowledge of NIST CSF, ISO/IEC 27001, CIS Controls; local regulatory requirements (BNM RMiT, PCI DSS).
• Familiar with security tools and their core functionalities (SIEM, EDR, DLP, IAM).

Responsibilities

• Provide local leadership to drive information security initiatives aligned with group directives and regulatory requirements (e.g., BNM RMiT, PCI DSS).
• Identify, assess and manage information security and cybersecurity risks with appropriate mitigations.
• Support security audits and ensure timely remediation of findings.
• Oversee security monitoring, incident response and threat management capabilities.
• Drive security improvement projects to strengthen the organization’s security posture.
• Review secure design and deployment of applications and infrastructure with security standards.
• Offer security advisory to support transformation initiatives and operations.
• Support cyber resilience and business continuity initiatives.
• Provide security insights for risk-based decision making.
• Promote continuous improvement of security controls and awareness.

Skills

Information security

Cybersecurity

Threat intelligence

Security monitoring

Incident response

Security controls

Risk management

Education

Bachelor's degree or higher in a relevant field

CISM/CISSP (desirable)

Tools

SIEM

EDR

DLP

IAM

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

The incumbent is responsible to deliver exceptional PRUexperience service that sets us apart and make customer service a strategic advantage:

• Implement tools, technologies, and other countermeasures that can be used to protect information, especially from exterior threats on actionable assets that will drive continuous growth and improvement of end-to-end customer experiences;
• Adopt master data management platforms for 7-sisters data sets
• Data strategy, policies and alignment of regional processes with local business units are implemented accordingly
• Protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integrity, and availability.

Key Responsibilities

• Provides local leadership to drive the implementation of the organization’s information security initiatives, aligned with Group directives, industry frameworks and applicable regulatory requirements (i.e BNM RMiT, BNM MCIPD, NIST, PDPA, PCI DSS).
• Identify, assess and manage information security and cybersecurity risks, ensuring appropriate mitigation measures are implemented
• Support security related internal and external audits, ensuring timely remediation and closure of findings
• Oversee security monitoring, incident response and threat management capabilities, ensuring effective detection, escalation and response of security incidents
• Drive the implementation of security improvement projects and initiatives to strengthen the organization’s security posture
• Review and approve secure design and deployment of applications and infrastructure in line with security standards
• Provide security advisory and guidance to support the organization’s transformation initiatives and business-as-usual operations
• Support cyber resilience and business continuity initiatives
• Provide security insights to support management in risk-based decision making
• Drive continuous improvement of security controls, processes and awareness across the organization

Qualifications & Requirements

• Qualifications Minimum tertiary education. Professional certification such as CISM, CISSP is desired but not a must.
• Experience
• Minimum 8-10 years of relevant experience in information security or cybersecurity roles.
• Proven track record in driving and delivering security initiatives to strengthen the organization’s security posture
• Knowledge
• Possess a strong understanding of key security frameworks and standards including NIST Cybersecurity Framework, ISO/IEC 27001, CIS Critical Security Controls, as well as applicable local regulatory requirements such as BNM RMiT, BNM MCIPD, and PCI DSS
• Demonstrate knowledge of threat intelligence and assessment
• Familiar with security tools and their core functionalities support effective security monitoring and incident response, including SIEM, EDR, DLP and IAM
• Possess strong understanding and practical application of security controls aligned with the organization’s risk appetite, internal policies and standards and regulatory requirements

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part‑time / fixed‑term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third‑party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.