Senior Manager, Security Innovation

prudential; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Prudential Malaysia in Kuala Lumpur is seeking a hands-on security innovator to build automation, orchestration, and AI-augmented tooling that accelerate GISP processes. The role combines applied security research with practical implementation, evaluating new technologies, running proofs-of-concept, and delivering working prototypes for safe adoption.

You will collaborate across Asia, Africa, and the UK with architecture, engineering, risk, and compliance.

Responsibilities

• Builds security automation workflows that connect tools, data sources, and controls into efficient, repeatable processes.
• Integrates disparate security tooling and telemetry into end-to-end automated workflows with minimal manual handoffs.
• Applies AI augmentation to triage, summarisation, and drafting with human-in-the-loop guardrails.
• Incorporates security checks into CI/CD and infrastructure-as-code workflows where appropriate.
• Researches new and emerging technologies and runs proofs-of-concept to inform adoption decisions.
• Translates research into practical recommendations and prototypes that can be operationalised.
• Maintains situational awareness of global threat landscape and regulatory expectations relevant to Prudential.
• Collaborates with business, engineering, risk and compliance stakeholders to prioritise controls and document residual risks.

Job description

Prudential's purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people's career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

This is a hands-on role focused on security innovation, combining building with applied research. The incumbent primarily builds security automation, orchestration, and AI-augmented tooling that make GISP processes faster and more consistent, and research new and emerging technologies, threats, and security approaches to inform what the team builds.

The role exists to improve the efficiency and scale of GISP's security work through automation and orchestration, while also exploring new and emerging technologies through applied research and proofs-of-concept that help Prudential adopt them safely and effectively.

Key contributions of the role include:

• Building security automation and orchestration that integrate GISP's security tools, controls, and processes into efficient, repeatable workflows.
• Applying AI augmentation where it improves the consistency and effectiveness of security controls and processes within GISP.
• Researching new and emerging technologies and security tooling, including proofs-of-concept and hands-on evaluation.
• Translate research findings into practical recommendations, reference approaches, and working prototypes the team can operationalize.

The role sits within the Enterprise Security Architecture & Innovation (ESAI) team, a specialist in capability within Group Information Security & Privacy (GISP). The team's mandate covers technology risk identification, assessment, and control definition for new and emerging technologies, together with building the automation and tooling that scale these capabilities.

The incumbent is expected to work across Prudential's business units in Asia, Africa, and the UK, collaborating with Group and local business unit (LBU) architecture, engineering, risk, compliance, and business stakeholders. The team operates in a fast-moving environment where the ability to build practical tooling, exercise sound judgement under ambiguity, and the ability to communicate clearly with senior stakeholders are as important as technical depth.

Security Innovation & Automation:

• Builds and orchestrates security automation workflows that connect tools, data sources, and controls across the security stack, reducing manual effort and turnaround time.
• Integrates disparate security tooling and telemetry into end-to-end automated workflows, for example assessment of intake, evidence collection, control validation, and reporting, so processes run with minimal manual handoffs.
• Applies AI augmentation within these workflows where it adds value, such as triage, summarisation, and drafting, with appropriate human-in-the-loop checkpoints and guardrails.
• Integrates security checks into CI/CD and infrastructure-as-code workflows where appropriate.

Applied Security Research & Innovation:

• Research new and emerging technologies (AI/ML, agentic frameworks, developer tools) and their security implications, tracking the threat landscape and relevant technology trends.
• Runs proofs-of-concept, tool evaluations, and experiments to test new security approaches and inform build and adoption decisions.
• Translates research into practical recommendations, reference approaches, and prototypes that the team can operationalise, and shares findings to build collective capability.

Awareness, Judgement & Decision Making :

• Maintains situational awareness of the global threat landscape, emerging attack techniques, regulatory expectations, and technology trends relevant to Prudential's risk profile.
• Exercises sound judgement on security architecture and tooling decisions within defined authority levels and escalates appropriately when decisions carry material risk.
• Operates effectively in ambiguous environments, thinking laterally and proactively identifying architecture gaps before issues escalates.

Collaboration, Ownership & Growth :

• Partners with business, engineering, risk, and compliance stakeholders to prioritise control requirements proportionate to inherent and residual risk, and ensures requirements, controls, and residual risks are documented in line with GISP governance.
• Contributes to the GISP community of practice through internal guidance, knowledge sharing, and cross-domain collaboration.
• Provides guidance and mentorship to junior team members, and supports the Senior Manager, Enterprise Security Architecture & Innovation on assigned priorities.
• Take ownership of assigned deliverables and personal career growth, driving capability uplift through skills development, certifications, and hands-on learning.

Prudential i