Senior Executive, IT Security Operations

Job Responsibilities

1. Security Operations & BAU

. Manage and administer configuration changes on production Firewalls, Web Application Firewalls (WAF), Application Load Balancer, network access controller and related network devices

. Approve and implement business-as-usual (BAU) security access and modification requests

. Maintain security rules, firewall policies, and system hardening

. Monitor security infrastructure health to ensure continuous, optimal performance

. Collaborate with network and infrastructure teams to resolve engineering issues

2.Security Incident Management & Reporting

. Provide comprehensive security operational reporting to management teams regularly

. Monitor security reporting dashboards to identify anomalous network and system behavior

. Ensure security incidents are tracked, investigated, and properly managed to resolution

. Respond to security incidents as a key technical escalation point

. Partner with the Managed Security Services Provider (MSSP) to ensure incident follow-up

. Review security incidents, firewall policies and operational performance with the vendor on a regular basis.

. Sign-off on vendor security reports, service level agreements (SLAs), and incident closures.

3. Vulnerability, Threat & API Management

. Manage API security configurations, gateways, and authentication controls

. Analyze threat intelligence feeds to proactively defend against emerging security risks

. Manage the end-to-end vulnerability assessment and penetration testing (VAPT) lifecycles

. Track patching schedules across systems to ensure timely remediation of flaws

4. Governance, Risk & Compliance

. Partner hand in hand with the IT Governance team on setup alignment

. Ensure day-to-day IT operations fully comply with internal corporate IT policies

. Align IT security standards with strict regional regulatory requirements

. Maintain continuous compliance for PDPA, MAS TRM, and PCI-DSS frameworks

. Prepare documentation, evidence, and reports for internal and external audits

. Update security policies to reflect evolving regional financial regulations

. Assess third-party vendor risks against corporate security frameworks

Job Requirements

Education & Experience

• Minimum 5 years of working experience within IT infrastructure and minimum 3 years of dedicated experience in IT Security
• Experience in Insurance or Financial Services Institutions (FSI) is highly preferred
• Degree in Computer Science, Information Technology, or related fields

Technical Skills &Competencies

• Hands-on expertise configuring enterprise-grade Firewalls, WAF technologies, Application gateway, Application load balancer, switches, Dot1x authentication and IPSec VPN
• Knowledge of Azure API security management principles, OAuth2, OWASP API Top 10, and modern authentication
• Vendor management skills to effectively govern external security partners and MSSPs
• Knowledge of MAS Guidelines, PDPA, and PCI-DSS compliance frameworks
• Certification in CISSP, CISM, CEH, or Azure Security Engineer (AZ-500) is preferred
• Analytical mindset to troubleshoot network security anomalies under pressure

Soft Skills

• Communication skills to explain complex technical risks clearly to non-technical stakeholders
• Team player to collaborate effectively across multi-disciplinary IT and governance infrastructure groups
• Adaptability to maintain focus and drive successful resolutions in high-pressure incident response situations
• Stakeholder management