Technical Project Manager (Cybersecurity)

Great Eastern; Kampung Malaysia Tambahan; On-site; MYR 180,000 - 240,000; Full time

Job summary

Great Eastern is seeking a cybersecurity delivery lead to independently review designs, challenge vendor recommendations, assess risks, and drive security solution deployment beyond traditional project management. The role spans solution delivery, governance, and transition to operations to ensure regulatory alignment and strong security posture.

You will coordinate with vendors and internal SMEs, oversee testing, risk remediation, and day‑2 readiness, and mentor teams through deployment to

Qualifications

• Bachelor’s degree in cybersecurity or related field.
• Minimum 8 years delivering cybersecurity or IT security initiatives, with at least 5 years in hands-on cybersecurity engineering, implementation, or technical delivery.
• Experience implementing enterprise cybersecurity solutions from design, integration, testing, and deployment through operations.
• Strong knowledge of cybersecurity architecture, security controls, and enterprise security technologies.
• Ability to review solution designs, architecture diagrams, network flows, technical specifications, and integration requirements.
• Experience managing project scope, timelines, risks, dependencies, vendors, and stakeholders across complex security initiatives.
• Proven ability to lead cross-functional teams and drive technical discussions.
• Strong analytical, problem-solving, communication, stakeholder management, and negotiation skills.
• Experience in banking, financial services, or insurance environments is preferred.
• Relevant certifications such as CISSP, CISM, CCSP, PMP, PRINCE2, Scrum Master, or vendor-specific security certifications are advantageous.

Responsibilities

• Lead security solution delivery and implementation with awarded vendors.
• Coordinate detailed technical design discussions, solution architecture reviews, and integration planning with internal SMEs and vendors.
• Ensure proposed solutions follow internal policy, standards, procedures, and regulatory instruments.
• Review and validate solution architectures, technical designs, security controls, and integration approaches.
• Participate in solution configuration reviews, deployment planning, migration activities, and technical troubleshooting sessions.
• Validate implementation outcomes against security requirements, architecture standards, and operational readiness criteria.
• Work closely with engineering teams to resolve implementation blockers, security gaps, and integration issues.
• Provide technical guidance during solution deployment, migration, testing, and operational transition activities.
• Participate in security reviews, threat modelling discussions, and technical design workshops.

Skills

Cybersecurity engineering

Cross-functional leadership

Vendor management

Risk assessment

Communication

Stakeholder management

Negotiation skills

Education

Bachelor degree in cybersecurity or related field

Job description

This is a technical project delivery role. The successful candidate is expected to possess sufficient cybersecurity engineering and architecture knowledge to independently review solution designs, challenge vendor recommendations, assess implementation risks, participate in technical troubleshooting, and drive security solution deployment activities beyond traditional project management responsibilities. The role is expected to perform the following:

1. Security Solution Delivery & Implementation

• Participate in end-to-end solutioning and implementation of cyber security projects with awarded vendors.
• Coordinate detailed technical design discussions, solution architecture reviews, and integration planning with internal SMEs and vendors.
• Ensure the proposed solutions follow internal policy, standards, and procedures, as well as regulatory instruments.
• Review and validate solution architectures, technical designs, security controls, and integration approaches.
• Participate in solution configuration reviews, deployment planning, migration activities, and technical troubleshooting sessions.
• Validate implementation outcomes against security requirements, architecture standards, and operational readiness criteria.
• Work closely with engineering teams to resolve implementation blockers, security gaps, and integration issues.
• Provide technical guidance during solution deployment, migration, testing, and operational transition activities.
• Participate in security reviews, threat modelling discussions, and technical design workshops.

2. Project Management & Governance

• Drive project planning, execution, monitoring, and closure in alignment with PMO framework and methodology.
• Manage project budgets, scope, resourcing, dependencies, and change requests.
• Prepare and maintain complete project documentation including RAID logs, implementation plans, UAT plans, cut-over/runbooks, and post‑implementation reports.
• Provide timely and accurate reporting to management; escalating risks and showstoppers early.

3. Transition to Operations

• Develop the BAU operating model for each security solution in partnership with Security Product Management Services team and Security Operations Centre.
• Ensure Day-2 teams are trained, onboarded, and ready for BAU prior to go-live.
• Oversee documentation handover, operational playbooks, and Day-2 readiness.

4. Risk, Compliance & Security Assurance

• Ensure all project activities comply with follow internal policy, standards and procedures, as well as regulatory instruments.
• Support cybersecurity assessments, solution hardening activities, and risk remediation.
• Maintain awareness of emerging security threats, technologies, and industry best practices.

5. Implementation Support Activities

• Coordinate and escort vendors to data centres when required for deployment or migration tasks.
• Oversee implementation testing, including SIT, UAT, security validation, and performance testing.
• Review and validate security testing results.
• Participate in vulnerability remediation verification.
• Coordinate penetration test issue tracking and closure.
• Validate security control effectiveness before production deployment.
• Assess solution hardening compliance against security baseline standards.

We are looking for people with

• Bachelor Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related discipline.
• Minimum 8 years of experience delivering cybersecurity or IT security initiatives, with at least 5 years in hands-on cybersecurity engineering, implementation, or technical delivery.
• Proven experience implementing enterprise cybersecurity solutions from design, integration, testing, and deployment through operational transition.
• Strong knowledge of cybersecurity architecture, security controls, and enterprise security technologies.
• Ability to review solution designs, architecture diagrams, network flows, technical specifications, and integration requirements.
• Experience managing project scope, timelines, risks, dependencies, vendors, and stakeholders across complex security initiatives.
• Proven ability to lead cross-functional teams, drive technical discussions, resolve implementation issues, and deliver successful outcomes.
• Strong analytical, problem-solving, communication, stakeholder management, and negotiation skills.
• Experience in banking, financial services, or insurance environments is preferred.
• Relevant certifications such as CISSP, CISM, CCSP, PMP, PRINCE2, Scrum Master, or vendor-specific security certifications are advantageous.

How you succeed

• Champion and embody our Core Values in everyday tasks and interactions.
• Demonstrate high level of integrity and accountability.
• Take initiative to drive improvements and embrace change.
• Take accountability of business and regulatory compliance risks, implementing measures to mitigate them effectively.
• Keep abreast with industry trends, regulatory compliance, and emerging threats and technologies to understand and highlight potential concerns/ risks to safeguard our company proactively.

Who we are

Founded in 1908, Great Eastern is a well-established market leader and trusted brand in Singapore and Malaysia. With over S$100 billion in assets and more than 16 million policyholders, including 12.5 million from government schemes, it provides insurance solutions to customers through three successful distribution channels – a tied agency force, bancassurance, and financial advisory firm Great Eastern Financial Advisers. The Group also operates in Indonesia and Brunei.

The Great Eastern Life Assurance Company Limited and Great Eastern General Insurance Limited have been assigned the financial strength and counterparty credit ratings of "AA-" by S&P Global Ratings since 2010, one of the highest among Asian life insurance companies. Great Eastern's asset management subsidiary, Lion Global Investors Limited, is one of the leading asset management companies in Southeast Asia.

Great Eastern is a subsidiary of OCBC, the longest established Singapore bank, formed in 1932. It is the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s and AA- by both Fitch and S&P. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.