Security Assurance Lead, Boost Digital Bank - #10510875

CM03741 - Security Assurance Lead, Boost Digital Bank

Location: Kuala Lumpur

Working Days: 5

Attractive Benefits Included:

• Fixed Basic
• Variable Bonus
• Medical Card
• Career prospects in High Profile & Multi-National Environment
• Friendly, well-organized, systematic, high-technology environment to work in

Interested candidates, kindly REGISTER your Job Seeker Profile with CareerMaster & APPLY NOW!

Shortlisted candidates will be notified.

JOB RESPONSIBILITIES:

Leadership:

• Lead and mentor team of security specialist and SMEs to ensure effective execution of security assurance activities
• Strategy and Planning:
• Develop, implement, and maintain a comprehensive security assurance strategy tailored to companies operating environment, risk profile, industry and regulatory standard
• Collaborate with senior management to establish security objectives aligned with the digital bank's business goals
• Regulatory Compliance:
• Stay current with local regulations and guidelines issued by Bank Negara Malaysia (BNM) and other relevant authorities pertaining to cybersecurity, data privacy, and financial industry security
• Perform periodic review and provide assurance to risk management committees and boards on the banks security practices and policies and its alignment with BNM's requirements and industry best practices
• Thematic Assessments and Review:
• Independent security assessments, penetration testing, lead red team and compromise assessments to evaluate the effectiveness of security controls
• Collaborate with internal and external auditors to support in providing compliance with regulatory requirements
• Technical Assessments:
• Strong understanding on Cloud, DevOps, Application Security, and related control landscape.
• Good to have prior experience in conducting and reviewing Penetration Tests as well configuration reviews
• Vendor and Third-Party Security:
• Evaluate and manage the security practices of third-party vendors and partners, ensuring they meet local regulatory expectations on thematic basis

JOB REQUIREMENTS:

• Bachelor’s Degree in Computer Science, Information Security, Cybersecurity, or a related field.
• Relevant certifications such as Certified Information Systems Auditor (CISA),
• Certified Information Systems Security Professional (CISSP), OSCP or industry specific certifications related to with a focus on the financial industry in Malaysia
• 10 years of work experience with a minimum of 3 years’ experience on assessing and/or implementing local cybersecurity regulations, guidelines, and standards, including those issued by Bank Negara Malaysia (BNM) and NISTProficiency in security tools, technologies, and risk assessment methodologies
• Excellent communication skills, including the ability to communicate effectively with regulators and senior management
• Strong leadership and collaboration abilities in cross-functional and multicultural environments
• Analytical mindset with the ability to tailor security strategies