Senior Security Advisor & Technical Project Manager

Hong Leong Bank; Malaysia; On-site; MYR 240,000 - 420,000; Full time

Job summary

Hong Leong Bank, a leading financial institution in Malaysia, seeks a Senior Security Advisor & Technical Project Manager to bridge cybersecurity engineering and business delivery. You will advise senior leadership, guide incident handling for high-severity threats, and lead end-to-end security projects across cloud and on-premises environments.

The role demands 8+ years in information security, strong architecture assessment skills, and hands-on incident response or SOC experience.

Qualifications

• 8+ years in information security, with leadership of complex technical projects or consulting engagements.
• Knowledge of Security Architecture principles (Zero Trust, NIST CSF, ISO 27001).
• Experience in Incident Response or SOC operations and threat analysis.

Responsibilities

• Strategic Security Advisory & Architecture: evaluate security maturity, gaps and threat models to deliver business-aligned roadmaps.
• Architecture & Secure Design: guide secure patterns across cloud, hybrid, zero-trust, IAM and network defenses.
• Architecture Review Board alignment: liaise with ARB to ensure solutions fit enterprise standards.
• Solution Advisory: provide hands-on security guidance to delivery teams from inception to post-implementation.
• Incident Response, Cyber Resilience & Escalations: act as senior technical escalation lead for high-severity incidents and breach responses.
• RFP/RFI Technical Leadership: drive security requirements for RFIs/RFPs with Procurement.
• End-to-End Delivery: scope, budget, resource and manage complex cybersecurity projects.

Skills

Security architecture

Incident response

Cloud security

Project management

Stakeholder mgmt

Tools

SIEM/EDR

Job description

If you are looking to excel and make a difference, take a closer look at us… Overview We are seeking an experienced and versatile Senior Security Advisor & Technical Project Manager to bridge the gap between complex cybersecurity engineering and high-impact business delivery. In this dual-capability role, you will act as a trusted advisor to senior leadership and clients—architecting resilient security postures, steering critical incident response scenarios, and leading end-to-end technical security projects. You aren’t just overseeing project schedules; you have the deep technical chops to evaluate architectures, challenge technical designs, and guide incident handling when high‑severity threats emerge.

Responsibilities

Strategic Security Advisory & Architecture

Security Maturity & Roadmaps: Evaluate organizational security maturity, compliance gaps and threat models to deliver actionable, business‑aligned security roadmaps.

Architecture & Secure Design

Assess and guide secure architecture patterns across cloud, hybrid environments, zero‑trust frameworks, network defense, and IAM systems.

Architecture Review Board (ARB) Alignment

Serve as the primary security engineering liaison to the ARB, ensuring proposed solutions align smoothly with enterprise architecture standards.

Solution Advisory

Provide hands‑on security architecture guidance to project delivery teams from project inception through post‑implementation review.

Incident Response, Cyber Resilience & Escalations

Major Incident Oversight: Act as the senior technical escalation lead for high‑severity (P1/P2) security incidents, breach responses, threat hunting escalations, and operational outages.

Root‑Cause Analysis (RCA): Direct structural RCAs following critical incidents and conduct analyses on recurring operational bottlenecks, legacy technical debt, and friction points.

Continuous Optimization: Direct remediation roadmaps to ensure long‑term resilience and feed operational learnings back into delivery models to streamline engineering workflows.

Commercial & Procurement Ownership

RFP/RFI Technical Leadership: Drive technical requirements and security evaluations for RFIs/RFPs, working directly with Procurement to evaluate and select vendors, software, and third‑party partners.

Vendor & Scope Management: Partner with business stakeholders and procurement to ensure vendor SOWs align with delivery outcomes, cost controls, and operational expectations.

Technical Project & Delivery Management

End‑to‑End Delivery: Scope, budget, resource, and manage complex cybersecurity projects (e.g., SIEM/SOAR deployments, Cloud Migrations, SOC transformations, Zero Trust implementations).

Cross‑Functional Leadership: Direct cross‑functional teams of security engineers, architects, developers, and third‑party vendors.

Executive Stakeholder Management: Bridge technical and executive conversations by translating complex technical risks into clear, business‑focused insights for C‑level leadership.

Required Qualifications & Experience

Experience

8+ years in information security, with at least 3–5 years leading complex technical projects or consulting engagements. Proven track record evaluating and advising on enterprise security architectures and cloud security designs. Direct, hands‑on experience in Incident Response (IR), threat analysis, or SOC operations.

Technical Proficiencies

Frameworks & Architecture

In‑depth knowledge of Security Architecture principles (Zero Trust, NIST CSF, ISO 27001).

Incident Response & Forensics

Practical understanding of the IR lifecycle (NIST / SANS framework), SIEM/EDR logs, packet analysis, and digital forensics fundamentals.

Cloud & Modern Infrastructure

Hands‑on familiarity with security controls in AWS, Azure, or GCP, as well as modern enterprise stack technologies (Container security, API security, CI/CD security).

About Hong Leong Bank

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital‑at‑the‑Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers.

Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available.

Expanding on our “Digital at the Core” ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life‑long learning, achieve their career aspirations and grow talent from within our organisation.

Hong Leong Bank (“HLB”) stands proudly as a leading financial services institution based in Malaysia, providing a wide range of comprehensive and innovative financial solutions across the region. These services are delivered through both digital and traditional means, via online and mobile banking, as well as our digital branch concept to provide customers with an efficient and seamless experience aided by technology.

As the service and financial landscape changes rapidly with the ever‑increasing use of technology, staying attuned to customers needs and desires becomes even more critical to HLB’s operations. To stay ahead of these dynamic changes, the Bank has adopted the approach of reimagining banking by embedding digital considerations and customer centricity in every aspect of our operations, from products and services as well as customer care and engagement.

HLB’s ethos of being Digital-At-The-Core powered by customers‑at‑the‑forefront will continue to lead us to innovate offerings in line with our aspiration of being a highly digital and innovative financial services organization.