Manager, Group Information Security (IAM)

About FWD Group

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 34 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828.

For more information, please visit www.fwd.com

FWD Technology and Innovation Malaysia Sdn. Bhd., known as FWD TIM, was established in late 2019. Strategically located in Kuala Lumpur, FWD TIM serves as a pivotal shared service location within FWD Group, providing services to multiple markets across the Group. FWD TIM houses a diverse and talented workforce focused on essential business and technology services such as information security, cloud operations, IT solutions delivery, digital and data, actuarial, finance, investments, and customer service, among many others. FWD TIM is dedicated to drive and deliver operational excellence and efficiency, foster innovation and ensure regulatory compliance across all business functions as well as maintain a competitive edge in the market.

PURPOSE

• The role resides within the Identity & Access Management Team.  This role will be independently and solely responsible to provide engineering and assurance to various IAM controls operated with the enterprise environment across all FWD markets.
• Support delivery of IAM capabilities into all the FWD markets
• Work with fellow colleagues in the initiatives to define, test, build and continuous enhancement of IT Security IAM solutions and procedures to support those solutions
• Help define the operational requirements and SOPs for Operation teams, to manage the implemented IAM capabilities.
• Manage allocated resources to deliver a project or initiative (either internal FWD staff or vendors).
• Collaborate with other Cyber Incident Response and Threat Intel teams on evaluation of weaknesses or new risks that require Engineering continuous improvement.
• Provide expertise to Business Units when needed, in building local IT Security solutions.

KEY ACCOUNTABILITIES

• New application onboarding and new enhancement of current existing IAM Integration.
• Drive IT Security Engineering Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.
• Work closely with the Head of IAM and Group CISO, through tracking and reporting function, to ensure regular updates to management on the IT Security Engineering Program and risks.

KEY PERFORMANCE INDICATORS

• Support team member in delivery initiatives On Time and on Budget aligned with Group IT Security roadmap.
• Ensure IT IAM Program across Business Units is carried out in alignment with the FWD business objectives and defined IT Security Plan timelines.
• Group IT Security IAM support the IAM governance and provide it for all Business Units related to IAM Tools
• Doing things right, creating synergies for the overall FWD goals and objectives, along with a people first approach.

EXTERNAL & INTERNAL CONTACTS

• Head of IT Security Engineering
• Group CISO
• Business Units IT Security Teams
• Group and Business Units Chief of Technology and Operations
• Group and Business Units IT & Operations
• Group and Business Units Internal Audit
• External Auditors
• Vendors and/or Service Providers

QUALIFICATIONS / EXPERIENCE

• Minimum 4 years working experience in IT Security and IAM role, preferably in Financial Services.
• Strong programming skills
• Regional experience in IT Security Technical or Engineering roles.
• Degree from Information Technology or equivalent discipline.
• Technical experience in Identify, Protect, Detect, Response or Recover areas.

KNOWLEDGE & TECHNICAL SKILLS

• Certifications in the cyber security is preferable
• CIAM experience at an engineering level
• Capable of independently writing custom workflows and work on custom use cases.
• Technical knowledge - HTML, XML, Java , SOAP, SAML, REST,SSO, OpenID connect, DevOps, Jenkins, BitBucket
• Auth0 experience will be an advantage.
• Excellent interpersonal and influential skills to enable the implementation and delivery of capabilities
• Good communication