System Security Manager

Hong Leong Bank; Malaysia; On-site; MYR 180,000 - 300,000; Full time

Job summary

Hong Leong Bank is seeking an experienced Senior Security Engineer to lead a dual-capacity role in system security engineering and PAM (MasterSAM). You will oversee governance, audits, and secure file transfer security across the bank and regional units while hands-on leading technical teams.

The role requires 7+ years in security engineering with 2+ years in people leadership, plus strong OS and encryption tooling knowledge.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.
• 7+ years in system security engineering/operations; 2+ years in technical team leadership.
• Experience in banking/financial services preferred.

Responsibilities

• Direct and mentor security engineers across the team and manage capacity.
• Enforce governance, audits, and compliance for security services across regional entities.
• Oversee PAM (MasterSAM) architecture, password vaulting, session recording, and credential rotation.

Skills

System security engineering

Team leadership

PAM knowledge

Windows/Linux OS

Education

Bachelor's degree in Computer Science, Cybersecurity, IT

Tools

MasterSAM

SEP

Carbon Black

JAMF

MaaS360

Job description

Overview

If you are looking to excel and make a difference, take a closer look at us… Overview: Dual-capacity role managing a system security engineering team while serving as the primary SME and hands-on lead for Privileged Access Management (MasterSAM). Responsible for hardening, optimizing, and governing endpoint, data, PAM, key management, and secure file transfer security across the Bank, regional entities, and business units. Bridges technical execution with governance, audit/RCSA compliance, and operational efficiency.

Responsibilities

Team Leadership & Governance: People & Capacity Management: Direct and mentor security engineers, balance workload bottlenecks, and plan team capacity. Frameworks & Development: Enforce clear RACI matrices across internal/regional IT, Platform, Security, and Service Desk (FOTS) teams. Drive talent development via the 70:20:10 framework for succession planning. Domain Oversight & Technical Execution: Key, Encryption & SSL: Oversee HSM and ESKM governance; drive end-to-end SSL certificate lifecycle automation (e.g., auto-ticketing). Endpoint & Mobile Security: Manage XDR and NBA protection stacks, coordinate pre-deployment health checks with FOTS to ensure total agent registration. File Transfer & Boundary Security: Eliminate single points of failure in secure file transfer environments and modernize legacy platforms with automated malware scanning. System Integrity: Maintain CIS server hardening benchmarks, source code scanning, OS access controls, and vendor PC security checks. Operational Efficiency & Continuous Improvement: Automation & RCSA: Automate routine workflows, auto-ticketing, and access requests; streamline RCSAs to remove redundant checks. Health Monitoring & SLAs: Continuously track tool health, agent connectivity (heartbeats), and signature updates across PAM/IAM/XDR/NBA tools. Enforce incident response/resolution SLAs and conduct Root Cause Analyses (RCAs). Lifecycle & Delegation: Manage End-of-Support (EOS) lifecycles for security agents. Offload Level 1 support tasks to regional teams and enforce pre-deployment security mandates. Compliance, Audit & Regional Governance: Audit & Baselines: Respond to internal/external audits within set timelines and maintain strict compliance baselines across production/non-production systems. Adhere to Group Compliance, PDPA, AML/CFT, and Code of Conduct. Regional Service Reviews: Conduct regular service reviews, gap analyses, asset inventories, and lead cross-border security centralization initiatives. MasterSAM SME & Individual Contributor: Act as hands-on administrator and technical authority for enterprise PAM (MasterSAM). Plan and execute MasterSAM architecture separation and migration projects for scalability and security isolation. Design, audit, and maintain access policies, password vaulting, session recording, and credential rotation across Windows and Unix/Linux (Solaris, AIX, RHEL, Euler). Manage L3 escalations and handle integrations with directory services, SIEM, and provisioning workflows.

Skills and Experience We Are Looking For

Education: Bachelor’s Degree in Computer Science, Cybersecurity, IT, or related field. Experience: 7+ years in system security engineering/operations; 2+ years in technical team leadership. Background in banking/financial services preferred. Technical Expertise: OS/Infra: Solaris, AIX, RHEL, Euler, Microsoft Windows Server. PAM & Security Tools: MasterSAM, SEP, Carbon Black (CBR), JAMF, MaaS360. Encryption & Data: HSM, TecTia, SFTP, SSL management, DLP, malware scan solutions. Scripting/Monitoring: Ability to build/use custom scripts/dashboards for heartbeat and connectivity tracking. Preferred Certifications: CISSP, CISM, or CISA.

About Hong Leong Bank We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China. We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our “Digital at the Core” ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation. Hong Leong Bank stands proudly as a leading financial services institution based in Malaysia, providing a wide range of comprehensive and innovative financial solutions across the region. These services are delivered through both digital and traditional means, via online and mobile banking, as well as our digital branch concept to provide customers with an efficient and seamless experience aided by technology. As the service and financial landscape changes rapidly with the ever-increasing use of technology, staying attuned to customers needs and desires becomes even more critical to HLB’s operations. To stay ahead of these dynamic changes, the Bank has adopted the approach of reimagining banking by embedding digital considerations and customer centricity in every aspect of our operations, from products and services as well as customer care and engagement. HLB’s ethos of being Digital-At-The-Core powered by customers-at-the-forefront will continue to lead us to innovate offerings in line with our aspiration of being a highly digital and innovative financial services organization.