Head, IT Security Service Delivery & Operations I IT Security

Job Purposes

• As the Head of IT Security Service Delivery and Operations, this role provides strategic leadership and operational oversight to safeguard enterprise systems while aligning security initiatives with business objectives.
• The incumbent drives risk management, security strategy, and compliance across Maybank Group entities, ensuring adherence to Maybank Group IT Security standards and local regulatory requirements.
• The position specializes in proactive security measures, project execution, and cross-functional collaboration to strengthen the bank's security posture.
• By guiding IT Security engineers, optimizing security tools (e.g., endpoint, network and cloud security tools), and leading end-to-end security projects, the role ensures confidentiality, integrity, and availability of information assets.
• Additionally, the incumbent acts as a subject matter expert, advising stakeholders, managing vendor relationships, and staying ahead of emerging technologies such as Zero Trust and Cloud Security.

Job Responsibilities

• Guide IT Security engineers in balancing risk management with business objectives; optimizing team performance, workload, and talent development.
• Maintain and enhance security tools (e.g., EDR, DLP, SWG, IPS); implement automation for threat detection and compliance reporting.
• Lead end-to-end assigned security projects; manage plans, budgets, and milestones; drive critical decisions for timely delivery.
• Identify, assess, and mitigate IT Security risks; ensure compliance with ISO 27001, NIST, and regulatory standards.
• Implement controls to uphold confidentiality, integrity, and availability of information assets.
• Act as primary IT Security contact; provide advisory on projects, BAU issues, and audit remediation.
• Partner with Infrastructure, Application, and Business teams to embed security in processes and projects.
• Manage vendor relationships; evaluate emerging technologies (e.g., Zero Trust, Cloud Security) for adoption.

Job Requirements

• Bachelor's degree in computer science, Information Technology, or a related discipline (Master's degree in Cybersecurity or Information Assurance is an advantage).
• Minimum 10 years of progressive experience in IT Security, including 5 years in a leadership role, with strong technical expertise in security tools, architecture, automation, compliance, and project delivery.
• Advanced knowledge of endpoint, network, and cloud security tools (EDR, DLP, SWG, IPS, WAF).
• Ability to review and propose configuration changes and automation for threat detection and compliance reporting.
• Strong understanding of Maybank Group Security Standards, PCI DSS, and regulatory requirements for system hardening and secure configurations.
• Experience in designing scripts and workflows to automate vulnerability management, compliance checks, and reporting.
• Skilled in identifying, assessing, and mitigating IT Security risks across complex environments.
• Proven ability to lead end-to-end security projects, manage technical deliverables, and enforce security controls.
• Deep understanding of the CIA triad and implementation of technical controls to safeguard information assets.
• Ability to assess emerging technologies (Zero Trust, Cloud Security) for technical feasibility and integration.