Senior Executive, IT Security Operations

Job Responsibilities

1. Security Operations & BAU

· Manage and administer configuration changes on production Firewalls, Web Application Firewalls (WAF), Application Load Balancer, network access controller and related network devices

· Approve and implement business-as-usual (BAU) security access and modification requests

· Maintain security rules, firewall policies, and system hardening

· Monitor security infrastructure health to ensure continuous, optimal performance

· Collaborate with network and infrastructure teams to resolve engineering issues

2. Security Incident Management & Reporting

· Provide comprehensive security operational reporting to management teams regularly

· Monitor security reporting dashboards to identify anomalous network and system behavior

· Ensure security incidents are tracked, investigated, and properly managed to resolution

· Respond to security incidents as a key technical escalation point

· Partner with the Managed Security Services Provider (MSSP) to ensure incident follow-up

· Review security incidents, firewall policies and operational performance with the vendor on a regular basis.

· Sign-off on vendor security reports, service level agreements (SLAs), and incident closures.

3. Vulnerability, Threat & API Management

· Manage API security configurations, gateways, and authentication controls

· Analyze threat intelligence feeds to proactively defend against emerging security risks

· Manage the end-to-end vulnerability assessment and penetration testing (VAPT) lifecycles

· Track patching schedules across systems to ensure timely remediation of flaws

4. Governance, Risk & Compliance

· Partner hand in hand with the IT Governance team on setup alignment

· Ensure day-to-day IT operations fully comply with internal corporate IT policies

· Align IT security standards with strict regional regulatory requirements

· Maintain continuous compliance for PDPA, MAS TRM, and PCI-DSS frameworks

· Prepare documentation, evidence, and reports for internal and external audits

· Update security policies to reflect evolving regional financial regulations

· Assess third-party vendor risks against corporate security frameworks

Job Requirements

Education & Experience

• Minimum 5 years of working experience within IT infrastructure and minimum 3 years of dedicated experience in IT Security
• Experience in Insurance or Financial Services Institutions (FSI) is highly preferred
• Degree in Computer Science, Information Technology, or related fields

Technical Skills &Competencies

• Hands-on expertise configuring enterprise-grade Firewalls, WAF technologies, Application gateway, Application load balancer, switches, Dot1x authentication and IPSec VPN
• Knowledge of Azure API security management principles, OAuth2, OWASP API Top 10, and modern authentication
• Vendor management skills to effectively govern external security partners and MSSPs
• Knowledge of MAS Guidelines, PDPA, and PCI-DSS compliance frameworks
• Certification in CISSP, CISM, CEH, or Azure Security Engineer (AZ-500) is preferred
• Analytical mindset to troubleshoot network security anomalies under pressure

Soft Skills

• Communication skills to explain complex technical risks clearly to non-technical stakeholders
• Team player to collaborate effectively across multi-disciplinary IT and governance infrastructure groups
• Adaptability to maintain focus and drive successful resolutions in high-pressure incident response situations
• Stakeholder management