Senior Manager, Security Innovation

Prudential Hong Kong Limited; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Prudential Hong Kong Limited seeks a hands-on Security Innovation & Automation engineer to build automation, orchestration, and AI-augmented tooling that scale GISP processes. You will explore new technologies and run proofs-of-concept to inform secure, practical tooling.

Collaborating across Prudential’s Asia, Africa and UK units, you’ll translate research into prototypes and reference approaches that can be operationalized with governance and risk controls guiding every decision.

Responsibilities

• Building security automation and orchestration that integrate GISP’s security tools, controls, and processes into efficient, repeatable workflows.
• Applying AI augmentation where it improves the consistency and effectiveness of security controls and processes within GISP.
• Researching new and emerging technologies and security tooling, including proofs-of-concept and hands-on evaluation.
• Translates research into practical recommendations, reference approaches, and prototypes that the team can operationalise, and shares findings to build collective capability.
• Maintains situational awareness of the global threat landscape, emerging attack techniques, regulatory expectations, and technology trends relevant to Prudential's risk profile.
• Partners with business, engineering, risk, and compliance stakeholders to prioritise control requirements proportionate to inherent and residual risk, and ensures requirements, controls, and residual risks are documented in line with GISP governance.

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed. This is a hands‑on role focused on security innovation, combining building with applied research. The incumbent primarily builds security automation, orchestration, and AI‑augmented tooling that make GISP processes faster and more consistent, and research new and emerging technologies, threats, and security approaches to inform what the team builds. The role exists to improve the efficiency and scale of GISP's security work through automation and orchestration, while also exploring new and emerging technologies through applied research and proofs‑of‑concept that help Prudential adopt them safely and effectively. The role sits within the Enterprise Security Architecture & Innovation (ESAI) team, a specialist in capability within Group Information Security & Privacy (GISP). The team’s mandate covers technology risk identification, assessment, and control definition for new and emerging technologies, together with building the automation and tooling that scale these capabilities. The incumbent is expected to work across Prudential’s business units in Asia, Africa, and the UK, collaborating with Group and local business unit (LBU) architecture, engineering, risk, compliance, and business stakeholders. The team operates in a fast‑moving environment where the ability to build practical tooling, exercise sound judgement under ambiguity, and the ability to communicate clearly with senior stakeholders are as important as technical depth.

Key contributions of the role include:

• Building security automation and orchestration that integrate GISP’s security tools, controls, and processes into efficient, repeatable workflows.
• Applying AI augmentation where it improves the consistency and effectiveness of security controls and processes within GISP.
• Researching new and emerging technologies and security tooling, including proofs‑of‑concept and hands‑on evaluation.
• Translate research findings into practical recommendations, reference approaches, and working prototypes the team can operationalize.

Security Innovation & Automation:

• Builds and orchestrates security automation workflows that connect tools, data sources, and controls across the security stack, reducing manual effort and turnaround time.
• Integrates disparate security tooling and telemetry into end‑to‑end automated workflows, for example assessment of intake, evidence collection, control validation, and reporting, so processes run with minimal manual handoffs.
• Applies AI augmentation within these workflows where it adds value, such as triage, summarisation, and drafting, with appropriate human‑in‑the‑loop checkpoints and guardrails.
• Integrates security checks into CI/CD and infrastructure‑as‑code workflows where appropriate.

Applied Security Research & Innovation:

• Research new and emerging technologies (AI/ML, agentic frameworks, developer tools) and their security implications, tracking the threat landscape and relevant technology trends.
• Runs proofs‑of‑concept, tool evaluations, and experiments to test new security approaches and inform build and adoption decisions.
• Translates research into practical recommendations, reference approaches, and prototypes that the team can operationalise, and shares findings to build collective capability.

Awareness, Judgement & Decision Making:

Maintains situational awareness of the global threat landscape, emerging attack techniques, regulatory expectations, and technology trends relevant to Prudential's risk profile. Exercises sound judgement on security architecture and tooling decisions within defined authority levels and escalates appropriately when decisions carry material risk. Operates effectively in ambiguous environments, thinking laterally and proactively identifying architecture gaps before issues escalates.

Collaboration, Ownership & Growth:

Partners with business, engineering, risk, and compliance stakeholders to prioritise control requirements proportionate to inherent and residual risk, and ensures requirements, controls, and residual risks are documented in line with GISP governance. Contributes to the GISP community of practice through internal guidance, knowledge sharing, and cross‑domain collaboration. Provides guidance and mentorship to junior team members, and support the Senior Manager, Enterprise Security Architecture & Innovation on assigned priorities. Take ownership of assigned deliverables and personal career growth, driving capability uplift through skills development, certifications, and hands‑on learning.

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part‑time / fixed‑term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third‑party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.

We are Prudential. For every life, we are partners. For every future, we are protectors. Prudential plc provides life and health insurance and asset management to 17 million customers across 20 markets in Asia and Africa. We are headquartered in Hong Kong and have dual primary listings on the Stock Exchange of Hong Kong and the London Stock Exchange. We are focused on four strategic regions: Greater China, ASEAN, India and Africa. Our customers are served by around 55,000 agents and more than 200 bank partners. Prudential plc is not affiliated in any manner with Prudential Financial, Inc., a company whose principal place of business is in the United States of America or with the Prudential Assurance Company, a subsidiary of M&G plc, a company incorporated in the United Kingdom. Find out more at www.prudentialplc.com Follow us on LinkedIn