Senior IT Security Specialist, Security Assurance
RHB Banking Group
Date: 13 hours ago
City: Remote
Contract type: Full time
Remote
Leadership and Strategic Oversight
- Mentor a team of IT Security Assurance
- Assist section head to define and maintain the security advisory and risk assessment framework aligned with corporate cybersecurity strategy.
- Review and validate operating system hardening configurations for Windows and Linux servers and others as listed in List of Technologies.
- Assess database security configurations and hardening controls for enterprise databases.
- Validate application security configurations and adherence to secure configuration standards.
- Review network device hardening, including firewalls, routers, switches, load balancers, and web application firewalls.
- Assess cloud security configurations and ensure compliance with approved cloud security baselines like Dockers,S3 Bucket , AzureDocDB and others.
- Verify compliance with hardening standards, benchmarks, and security best practices.
- Conduct periodic hardening and Adhoc QA scan and identify configuration weaknesses.
- Ensure security patches and configuration updates are implemented according to organizational requirements.
- Report significant risks and mitigation progress to senior management and governance committees.
- To align and execute IT security risk assessment according to Group Risk IT risk assessment methodology
- Lead the ISO 27001 certification and maintenance process, ensuring continuous compliance of the Information Security Management System (ISMS).
- Coordinate internal and external audits, managing relationships with auditors and certification bodies.
- Ensure risk assessments, Statement of Applicability (SoA), and ISMS documentation remain current and aligned with evolving business and regulatory requirements.
- Track and manage audit nonconformities, corrective action plans, and improvement initiatives.
- Conduct security risk assessments and identify security gaps, vulnerabilities, and control deficiencies.
- Validate implementation of security controls, including authentication, authorization, logging, monitoring, and encryption.
- Support security governance initiatives and provide recommendations to mitigate identified risks.
- Review and track security findings, risk exceptions, and remediation activities.
- Provide security assurance and approval prior to production deployment.
- Collaborate with project teams, infrastructure teams, developers, and security stakeholders to ensure security requirements are addressed.
- Perform security assessments of Android and iOS mobile applications.
- Coordinate and review third-party risk assessments and recommend mobile configuration.
- Monitor performance, completeness and effectiveness of all managed security tools and controls.
- Implement automation and process improvement to reduce operational overhead
- Define KPIs and SLAs for tool uptime, incident response and compliance posture.
- Ensure all security controls meet internal and external regulatory requirements.
- Own the documentation of policies, procedures, operation manual and security standards related to managed systems
- Assist internal and external audits for the security technologies under this section.
- Drive remediation plans for audit findings and ensure timely closure.
How to apply
To apply for this job you need to authorize on our website. If you don't have an account yet, please register.
Post a resumeSimilar jobs
Solution Sales Specialist
Vodafone,
Remote
12 hours ago
Role ProfileRole title: Solution Sales SpecialistFunction: Vodafone Business InternationalDepartment: SalesReports to: Regional Solution Sales ManagerLocation: Kuala Lumpur, MalaysiaJoin UsAt Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and...
Global Quality Senior Manager
Celestica,
Remote
13 hours ago
Req ID: 135519Remote Position: NoRegion: AsiaCountry: MalaysiaState/Province: JohorCity: SenaiSummarySenior Quality Manager - New Production Introduction (NPI) FocusDetailed DescriptionQuality Planning & Strategy: Lead the design and deployment of Quality Management Systems (QMS) processes and tools to ensure NPI objectives and customer requirements are met.DFx & Technical Readiness: Drive Design for Excellence (DFx) reviews and oversight on validation strategies (IQ,OQ,PQ) to ensure...
DRSC T&L: Tax Transformation Consulting (Statutory Accounting) (Assistant Manager)
ACCA Careers,
Remote
13 hours ago
Deloitte SEADRSC T&L: Tax Transformation Consulting (Statutory Accounting) (Assistant Manager)Title: DRSC Tax – Tax Transformation Consulting (Assistant Manager)Are you ready to unleash your potential?At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio...
