Senior Security Advisor & Technical Project Manager

Hong Leong Bank Berhad; Petaling Jaya; On-site; MYR 180,000 - 300,000; Full time

Job summary

Hong Leong Bank Berhad is seeking an experienced Senior Security Advisor & Technical Project Manager to bridge cybersecurity engineering with high-impact business delivery. The role combines advisory leadership, architectural guidance, and hands-on project management across cloud, on-premises, and zero-trust environments.

You will lead major security initiatives, coordinating with executives and delivery teams to drive resilient architectures, respond to critical incidents, and ensure secure,

Qualifications

• 8+ years in information security with leadership of complex projects or consulting engagements.
• Proven track record evaluating and advising on enterprise security architectures and cloud security designs.
• Hands-on experience in Incident Response, threat analysis, or SOC operations.
• In-depth knowledge of Security Architecture principles (Zero Trust, NIST CSF, ISO 27001).
• Practical understanding of IR lifecycle (NIST/SANS), SIEM/EDR logs, and forensics fundamentals.
• Hands-on familiarity with security controls in AWS, Azure, or GCP, and modern enterprise tech stacks.

Responsibilities

• Strategic Security Advisory & Architecture: deliver business-aligned security roadmaps and secure design guidance.
• Incident Response, Cyber Resilience & Escalations: lead high-severity incidents and perform RCAs.
• Commercial & Procurement Ownership: drive technical requirements for RFIs/RFPs and vendor evaluation.
• Technical Project & Delivery Management: scope, budget, resources, and manage complex security projects.

Skills

Security Architecture

Incident Response

Technical Project Management

Cloud Security

Zero Trust

NIST CSF

ISO 27001

Tools

SIEM/SOAR

Cloud Platforms

Job description

We are seeking an experienced and versatile Senior Security Advisor & Technical Project Manager to bridge the gap between complex cybersecurity engineering and high-impact business delivery.

In this dual-capability role, you will act as a trusted advisor to senior leadership and clients—architecting resilient security postures, steering critical incident response scenarios, and leading end-to-end technical security projects. You aren’t just overseeing project schedules; you have the deep technical chops to evaluate architectures, challenge technical designs, and guide incident handling when high-severity threats emerge.

Responsibilities:

Strategic Security Advisory & Architecture

• Security Maturity & Roadmaps: Evaluate organizational security maturity, compliance gaps and threat models to deliver actionable, business-aligned security roadmaps.
• Architecture & Secure Design: Assess and guide secure architecture patterns across cloud, hybrid environments, zero-trust frameworks, network defense, and IAM systems.
• Architecture Review Board (ARB) Alignment: Serve as the primary security engineering liaison to the ARB, ensuring proposed solutions align smoothly with enterprise architecture standards.
• Solution Advisory: Provide hands-on security architecture guidance to project delivery teams from project inception through post-implementation review.

Incident Response, Cyber Resilience & Escalations

• Major Incident Oversight: Act as the senior technical escalation lead for high-severity (P1/P2) security incidents, breach responses, threat hunting escalations, and operational outages.
• Root-Cause Analysis (RCA): Direct structural RCAs following critical incidents and conduct analyses on recurring operational bottlenecks, legacy technical debt, and friction points.
• Continuous Optimization: Direct remediation roadmaps to ensure long‑term resilience and feed operational learnings back into delivery models to streamline engineering workflows.

Commercial & Procurement Ownership

• RFP/RFI Technical Leadership: Drive technical requirements and security evaluations for RFIs/RFPs, working directly with Procurement to evaluate and select vendors, software, and third‑party partners.
• Vendor & Scope Management: Partner with business stakeholders and procurement to ensure vendor SOWs align with delivery outcomes, cost controls, and operational expectations.

Technical Project & Delivery Management

• End-to-End Delivery: Scope, budget, resource, and manage complex cybersecurity projects (e.g., SIEM/SOAR deployments, Cloud Migrations, SOC transformations, Zero Trust implementations).
• Cross-Functional Leadership: Direct cross-functional teams of security engineers, architects, developers, and third‑party vendors.
• Executive Stakeholder Management: Bridge technical and executive conversations by translating complex technical risks into clear, business-focused insights for C-level leadership.

Required Qualifications & Experience

Experience

• 8+ years in information security, with at least 3–5 years leading complex technical projects or consulting engagements.
• Proven track record evaluating and advising on enterprise security architectures and cloud security designs.
• Direct, hands‑on experience in Incident Response (IR), threat analysis, or SOC operations.
• Frameworks & Architecture: In‑depth knowledge of Security Architecture principles (Zero Trust, NIST CSF, ISO 27001).
• Incident Response & Forensics: Practical understanding of the IR lifecycle (NIST / SANS framework), SIEM/EDR logs, packet analysis, and digital forensics fundamentals.
• Cloud & Modern Infrastructure: Hands‑on familiarity with security controls in AWS, Azure, or GCP, as well as modern enterprise stack technologies (Container security, API security, CI/CD security).