Senior Regional & MIBG IT Security I IT Security

Job Responsibilities

• Provide advisory on IT Security related issues, Technology Services will assume this role with the assistance from Maybank Group IT Security).
• Pro-actively manage and get involved in IT Security related matters and across Maybank Securities and MIBG Security entities regionally.
• Consult in IT security related matters with regards to IT projects including following up on improvement plans that have been put in place.
• Ensure and drive the cyber security controls for MIBG in countries as per the IT Roadmap.
• Ensuring the target operating model adopted by Maybank Group IT Security in terms of support are diligently followed and complied with for Maybank Securities entities.
• Point of contact for security tool updates across Maybank Securities and MIBG Security entities and diligently ensuring respective entities remediate non-compliances.
• Point of contact to ensure security tool policies such as but not limited to Data Loss Prevention policies, secure web gateway policies, intrusion prevention system policies are enforced in line with local regulatory and/or as per Maybank Group standards.
• Point of contact in monitoring and managing remediation activities for MIBG Security entities that have been identified and assigned by Maybank Group IT Security.
• Work hand in hand with infrastructure and application team with Maybank Group Securities and MIBG Security entities to ensure asset information at hand are constantly updated.
• Ensure security tool licenses information are inline and updated in accordance to Maybank Group IT Security.

Job Requirements

• A bachelor's degree in computer science, information technology or a related discipline. Certified Information Systems Security Professional (CISSP), CompTIA Security +.
• At least 7 years of working experience in the related field is required for this position.
• Cybersecurity, Information Security, Security Operation Center, Threat Intel, Security Operation, Security Projects.
• Able to communicate information security-related concepts to a broad range of technical and non-technical staff.
• Must have a solid understanding of information technology and information security & Cybersecurity Tools usage.