Head, Regional MIBG & IT Security I IT Security

Job Purposes

• Lead and define the IT security strategy across the MIBG region.
• Ensure the confidentiality, integrity, and availability of IT systems and data.
• Oversee regional security operations, governance, risk management, and compliance.
• Provide strategic leadership for IT security initiatives and programs.
• Ensure adherence to global and local security standards, policies, and regulatory requirements.
• Collaborate with business, IT, and regulatory stakeholders to mitigate risks.
• Drive proactive measures to protect organizational assets from cyber threats.
• Mentor and guide regional IT security teams to build capability and resilience.

Job Responsibilities

• Define, implement, and continuously improve the regional IT security strategy.
• Provide guidance and direction to regional IT security teams.
• Ensure adherence to global and local security standards, policies, and regulatory requirements. Conduct periodic reviews and audits.
• Identify, assess, and mitigate IT security risks.
• Lead vulnerability management, threat intelligence, and incident response activities.
• Oversee investigation and resolution of security incidents.
• Develop and execute response plans for critical events.
• Collaborate with business units, IT teams, regulators, and external partners to implement security initiatives.
• Promote cybersecurity awareness programs and ensure training for staff and regional teams.
• Guide the adoption of secure technologies, architecture reviews, and system hardening practices.
• Mentor and develop regional IT security teams.
• Identify talent gaps and succession plans.

Job Requirements

• Bachelor's or Master's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Strong understanding of IT infrastructure, networking, and cybersecurity principles.
• Minimum 10–12 years of progressive experience in IT security, cybersecurity, or risk management roles.
• Proven track record in leading IT security programs and teams, preferably across multiple countries or regions.
• Experience with security governance, incident response, threat management, and regulatory compliance.
• Exposure to financial services or banking environment is highly preferred.

Technical & Professional

• IT security frameworks, cybersecurity practices, risk management, network and application security.
• Incident response, vulnerability management, threat intelligence, and secure architecture review.
• Knowledge of multi-country regulatory compliance (Malaysia, Singapore, Indonesia, India, UK, Philippines, Thailand, Vietnam).

Leadership & Management

• Lead and develop high-performing teams; strategic thinking; project/program management.
• Stakeholder management and decision-making under pressure.

Analytical & Problem-Solving

• Assess risks, identify threats, and implement actionable solutions.
• Anticipate emerging security threats and technology trends.

Behavioral & Personal Attributes

• High integrity, ethical, proactive, resilient, and adaptable.
• Excellent communication and mentoring skills