Senior Security Advisor - Technical Project Manager

Hong Leong Bank; Shah Alam; On-site; MYR 180,000 - 260,000; Full time

Job summary

Hong Leong Bank is seeking a Senior Security Advisor and Technical Project Manager to bridge cybersecurity engineering with strategic business delivery. You will architect resilient security postures, lead high-stakes incidents, and manage end-to-end technical security initiatives across cloud, on-prem, and hybrid environments.

You will guide incident handling, perform RCA, and translate complex security risks into clear business insights for executive leadership while steering cross-functional

Qualifications

• 8+ years in information security with 3-5 years leading complex security projects or engagements.
• Proven track record evaluating security architectures and cloud security designs.
• Hands-on experience in Incident Response, threat analysis, or SOC operations.

Responsibilities

• Act as senior security advisor for strategic security posture and architecture decisions.
• Lead major incident oversight, root-cause analysis, and remediation roadmaps.
• Drive technical requirements for RFIs/RFPs and manage vendor/scope relationships.
• Scope, budget, resource, and deliver complex cybersecurity projects end-to-end.

Skills

Security architecture

Incident response

Project leadership

Cloud security

Executive stakeholder management

Tools

SIEM

EDR

Cloud platforms

Job description

Senior Security Advisor - Technical Project Manager

Responsibility

If you are looking to excel and make a difference, take a closer look at us…

Overview We are seeking an experienced and versatile Senior Security Advisor & Technical Project Manager to bridge the gap between complex cybersecurity engineering and high-impact business delivery.

In this dual-capability role, you will act as a trusted advisor to senior leadership and clients - architecting resilient security postures, steering critical incident response scenarios, and leading end-to-end technical security projects. You aren’t just overseeing project schedules; you have the deep technical chops to evaluate architectures, challenge technical designs, and guide incident handling when high-severity threats emerge.

Responsibilities

Strategic Security Advisory & Architecture

• Security Maturity & Roadmaps: Evaluate organizational security maturity, compliance gaps and threat models to deliver actionable, business-aligned security roadmaps.
• Architecture & Secure Design: Assess and guide secure architecture patterns across cloud, hybrid environments, zero-trust frameworks, network defense, and IAM systems.
• Architecture Review Board (ARB) Alignment: Serve as the primary security engineering liaison to the ARB, ensuring proposed solutions align smoothly with enterprise architecture standards.
• Solution Advisory: Provide hands-on security architecture guidance to project delivery teams from project inception through post-implementation review.

Incident Response, Cyber Resilience & Escalations

• Major Incident Oversight: Act as the senior technical escalation lead for high-severity (P1/P2) security incidents, breach responses, threat hunting escalations, and operational outages.
• Root-Cause Analysis (RCA): Direct structural RCAs following critical incidents and conduct analyses on recurring operational bottlenecks, legacy technical debt, and friction points.
• Continuous Optimization: Direct remediation roadmaps to ensure long-term resilience and feed operational learnings back into delivery models to streamline engineering workflows.

Commercial & Procurement Ownership

• RFP/RFI Technical Leadership: Drive technical requirements and security evaluations for RFIs/RFPs, working directly with Procurement to evaluate and select vendors, software, and third-party partners.
• Vendor & Scope Management: Partner with business stakeholders and procurement to ensure vendor SOWs align with delivery outcomes, cost controls, and operational expectations.

Technical Project & Delivery Management

• End-to-End Delivery: Scope, budget, resource, and manage complex cybersecurity projects (e.g., SIEM/SOAR deployments, Cloud Migrations, SOC transformations, Zero Trust implementations).
• Cross-Functional Leadership: Direct cross-functional teams of security engineers, architects, developers, and third-party vendors.
• Executive Stakeholder Management: Bridge technical and executive conversations by translating complex technical risks into clear, business-focused insights for C-level leadership.

Experience

Required Qualifications & Experience

• 8+ years in information security, with at least 3-5 years leading complex technical projects or consulting engagements.
• Proven track record evaluating and advising on enterprise security architectures and cloud security designs.
• Direct, hands-on experience in Incident Response (IR), threat analysis, or SOC operations.

Technical Proficiencies

• Frameworks & Architecture: In-depth knowledge of Security Architecture principles (Zero Trust, NIST CSF, ISO 27001).
• Incident Response & Forensics: Practical understanding of the IR lifecycle (NIST / SANS framework), SIEM/EDR logs, packet analysis, and digital forensics fundamentals.
• Cloud & Modern Infrastructure: Hands-on familiarity with security controls in AWS, Azure, or GCP, as well as modern enterprise stack technologies (Container security, API security, CI/CD security).

For more job opportunities, please go to HLB Careers: https://hlb.wd3.myworkdayjobs.com/HLBCareers/

We appreciate your application and will be in touch with shortlisted candidates regarding next steps

About Hong Leong Bank

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China. We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our "Digital at the Core" ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.