Senior Executive, IT Security Operations

Job Responsibilities

1. Security Operations & BAU

·        Manage and administer configuration changes on production Firewalls, Web Application Firewalls (WAF), Application Load Balancer, network access controller and related network devices

·        Approve and implement business-as-usual (BAU) security access and modification requests

·        Maintain security rules, firewall policies, and system hardening

·        Monitor security infrastructure health to ensure continuous, optimal performance

·        Collaborate with network and infrastructure teams to resolve engineering issues

2. Security Incident Management & Reporting

·        Provide comprehensive security operational reporting to management teams regularly

·        Monitor security reporting dashboards to identify anomalous network and system behavior

·        Ensure security incidents are tracked, investigated, and properly managed to resolution

·        Respond to security incidents as a key technical escalation point

·        Partner with the Managed Security Services Provider (MSSP) to ensure incident follow-up

·        Review security incidents, firewall policies and operational performance with the vendor on a regular basis.

·        Sign-off on vendor security reports, service level agreements (SLAs), and incident closures.

3. Vulnerability, Threat & API Management

·        Manage API security configurations, gateways, and authentication controls

·        Analyze threat intelligence feeds to proactively defend against emerging security risks

·        Manage the end-to-end vulnerability assessment and penetration testing (VAPT) lifecycles

·        Track patching schedules across systems to ensure timely remediation of flaws

4. Governance, Risk & Compliance

·        Partner hand in hand with the IT Governance team on setup alignment

·        Ensure day-to-day IT operations fully comply with internal corporate IT policies

·        Align IT security standards with strict regional regulatory requirements

·        Maintain continuous compliance for PDPA, MAS TRM, and PCI-DSS frameworks

·        Prepare documentation, evidence, and reports for internal and external audits

·        Update security policies to reflect evolving regional financial regulations

·        Assess third-party vendor risks against corporate security frameworks

Job Requirements

Education & Experience

• Minimum 5 years of working experience within IT infrastructure and minimum 3 years of dedicated experience in IT Security
• Experience in Insurance or Financial Services Institutions (FSI) is highly preferred
• Degree in Computer Science, Information Technology, or related fields

Technical Skills &Competencies

• Hands-on expertise configuring enterprise-grade Firewalls, WAF technologies, Application gateway, Application load balancer, switches, Dot1x authentication and IPSec VPN
• Knowledge of Azure API security management principles, OAuth2, OWASP API Top 10, and modern authentication
• Vendor management skills to effectively govern external security partners and MSSPs
• Knowledge of MAS Guidelines, PDPA, and PCI-DSS compliance frameworks
• Certification in CISSP, CISM, CEH, or Azure Security Engineer (AZ-500) is preferred
• Analytical mindset to troubleshoot network security anomalies under pressure

Soft Skills

• Communication skills to explain complex technical risks clearly to non-technical stakeholders
• Team player to collaborate effectively across multi-disciplinary IT and governance infrastructure groups
• Adaptability to maintain focus and drive successful resolutions in high-pressure incident response situations
• Stakeholder management