VP2, Information Security SOC & Surveillance Lead, T&O

United Overseas Bank; Kuala Lumpur; On-site; MYR 100,000 - 150,000; Full time

Job summary

A prominent financial institution in Kuala Lumpur is looking for a VP of Information Security SOC & Surveillance Lead. This role involves leading a team in managing security operations, interpreting security alerts, and ensuring compliance with security policies. The ideal candidate should have 8-15 years of relevant experience, a degree in a related field, and strong analytical and communication skills. Join us to enhance our security measures and ensure the integrity of our systems.

Qualifications

• Minimum 8-15 years of experience in IT security.
• Industry certifications like CRISC, CISSP, CEH, CISM, or CISA are a plus.
• Comfortable managing multiple tasks independently.

Responsibilities

• Lead the SOC & Surveillance team to achieve set goals.
• Manage SOC & Surveillance operations for security design.
• Prepare monthly management dashboard reports.

Skills

Security alert interpretation

Anomaly detection

Incident response lifecycle

Log analysis

Stakeholder engagement

Analytical skills

Communication skills

Education

Bachelor's degree in Computer Science or IT

Tools

SIEM platforms (e.g., Splunk, QRadar, ArcSight)

EDR/NDR/XDR tools

Forensic tools

Job description

VP2, Information Security SOC & Surveillance Lead, T&amp&O

United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia Pacific, Europe and North America. In Asia, we operate through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia and Thailand, as well as branches and offices. Our history spans more than 80 years. Over this time, we have been guided by our values - Honorable, Enterprising, United and Committed. This means we always strive to do what is right, build for the future, work as one team and pursue long‑term success. It is how we work, consistently, be it towards the company, our colleagues or our customers.

Responsibilities

• Acts as a team leader providing guidance to SOC & Surveillance team and sets goals and assists the team in accomplishing those goals.
• Manage SOC & Surveillance and provide consultancy to strengthen security design.
• Ability to interpret and act on security alerts and telemetry data.
• Skilled in security event log analysis, anomaly detection, and correlating events across systems.
• Strong knowledge of incident response lifecycle: detection, containment, eradication, recovery, and post‑incident analysis.
• Coordinate with project manager to deliver security projects/initiatives and provide technical consultancy.
• Monitor and analyze DLP alerts to detect potential data exfiltration or misuse.
• Ability to define and tune DLP policies based on data classification and business needs.
• Coordinate with the vendor to perform external perimeter monitoring and Internet Service Provider for Denial‑of‑Service monitoring.
• Coordinate with vendor to perform Compromise Assessment and track the finding for closure.
• Collate and provide evidence/submission requested by various parties (risk management/auditor/regulator) to confirm the security policies, processes, guidelines, controls are followed/implemented accordingly.
• Performing risk analysis for security surveillance and implementing mitigation strategies.
• Gather Security hygiene and operation statistics.
• Prepare monthly management dashboard reports.

Requirements

• A bachelor's degree in computer science, Engineering, Information Systems or its equivalent.
• Minimum 8-15 years of related working experience. Knowledge of IT security is essential. Industry certifications will be a plus e.g. CRISC, CISSP, CEH, CISM and CISA.
• Highly result oriented and can work independently. Must be a self‑reliant team player who is comfortable with managing multiple tasks and responsibilities.
• Ability to build relationship and interact effectively with internal and external parties. Strong engagement skills with stakeholder i.e. business and technology, will be a plus.
• Good analytical, technical, written and verbal communication skills.
• Ability to exercise discretion and independent judgment in applying established techniques, procedures or standards.
• Technical expertise in one or more of the following

• SIEM platforms (e.g., Splunk, QRadar, ArcSight) for log aggregation, correlation, and alerting
• EDR/NDR/XDR tools, IDS/IPS, and network traffic analysis
• Network Concepts and Security, Encryption/Authentication fundamentals, Access Management, Application Security, Platform (Windows, UNIX/Linux) Security, Database Security
• Hands‑on experience in various security tools (e.g. SIEM, APT, XDR, NDR and forensic tools)

• Familiar with security standards and best practice; regulatory requirement such as BNM RMIT, MAS, Paynet, PCI‑DSS; Architecture and security of operating system.

Additional Requirements

Develop, Engage, Execute, Strategise

Be a Part of the UOB Family

UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non‑merit factors. All employment decisions at UOB are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.

Apply now and make a Difference

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad.