Manager, Group Information Security (ISCOE)

About FWD Group

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 34 million customers across 10 markets, including BRI Life in Indonesia. FWD's customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828.

For more information, please visit

FWD Technology and Innovation Malaysia Sdn. Bhd., known as FWD TIM, was established in late 2019. Strategically located in Kuala Lumpur, FWD TIM serves as a pivotal shared service location within FWD Group, providing services to multiple markets across the Group. FWD TIM houses a diverse and talented workforce focused on essential business and technology services such as information security, cloud operations, IT solutions delivery, digital and data, actuarial, finance, investments, and customer service, among many others. FWD TIM is dedicated to drive and deliver operational excellence and efficiency, foster innovation and ensure regulatory compliance across all business functions as well as maintain a competitive edge in the market.

PURPOSE

• Manage and drive end-to-end ISCOE Network Security Operations projects and operations for Group Office and all markets, in accordance with Group information security standards and requirements as well as FWD Group technology strategy, policies and procedures.

• Act as the SME and primary technical contact and ensure timely and effective resolutions within SLA and the established processes and SOPs for Firewall technology operations and management.

KEY ACCOUNTABILITIES

• Develop and maintain deep technical and functional knowledge and be the SME for Firewall technologies, while supporting the ZTNA and emerging tools/services, as part of the new ISCOE Network Security Operations & other SecEng team.

• Lead, coordinate and ensure the delivery of change implementation are carried out in accordance with the defined ITILv3 processes.

• Function as the L3 Technical Engineer and primary escalation point for Firewall and ZTNA services to business units and internal teams within Group IT Security and Group Technology.

• Lead, coordinate and manage planned change requests and implementation as well as coach ISCOE Network Security engineers in providing support on Incidents (P1/P2) and service requests.

• Manage and coordinate potential incidents escalations, for investigation, along with the relevant internal or external stakeholders

• Lead and manage the communication and coordination of the ISCOE Network Security incident response actions with business units and ensure smooth and proper closure of the Incident Response cases.

• Contribute to the design & planning requirements on new initiatives and upgrades related to Firewall and ZTNA through close collaboration with vendors and internal teams within Group Security Engineering.

• Contribute to build, review and handover BAU requirements including guidelines, baselines and SOPs for Group IT Security Operations, to manage the implemented IT Security solutions and controls.

• Assist to research on process improvement for existing solutions and services by working closely with internal teams and vendors.

• Work closely with Service Management, Security Governance, Security Operations, and Incident Response teams to deliver objectives.

• Provide guidance and expertise to stakeholders and business units as and when needed with regards to ISCOE Network Security services, mainly on Firewall management.

• Adopt a Cloud-first strategic mindset on deliverables.

• Manage relationships and performance quality delivered by vendors.

• Contribute to the review and implementation of key areas defined for improvement for Firewall and ZTNA management.

• Contribute to the regular ISCOE Network Security Operations updates for management reporting.

KEY PERFORMANCE INDICATORS

• Ensure operations and management of services are delivered within agreed SLAs across FWD group and business units.

• Support the ISCOE Network Security Lead and Head of Security Engineering in continuous uplift of deliverables.

• Ensure deliverables across Business Units are carried out in alignment with FWD business objectives and mandated timelines.

• Ensure deliverables are carried out in a cost-effective manner utilising available processes and resources (including people and technologies) aligned with the FWD business goals.

• Provide continuous support and consultation with regards to deliverables across FWD Group and Business Units.

• Conduct periodic review assessments on existing controls and processes related to deliverables.

• Doing things right, creating synergies for the overall FWD goals and objectives, along with a people-first approach.

EXTERNAL & INTERNAL CONTACTS

• Senior Manager (Network Security) - Group Security Engineering

• ISCOE Network Security Lead - Group Security Engineering

• Head of Security Engineering

• Group CISO

• Group and Business Units Chief of Technology and Operations

• Group and Business Units IT & Operations

• Group and Business Units Internal Audit

• External Auditors

• Vendors and/or Service Providers

QUALIFICATIONS / EXPERIENCE

• Minimum 6 years working experience in IT Security Management role, preferably in Financial Services.

• Bachelor's Degree from Information Technology or any equivalent discipline.

• Minimum 3 years of working experience with Firewall technology and products, especially Checkpoint and Palo Alto.

• Reasonable experience on supporting firewall technologies such as Algosec, IPS/IDS

• Good understanding on next-generation technologies such as ZTNA, FWaaS & WAF.

• Certifications such as CISSP, or anything related to Cloud/ISCOE Network Security would be an added advantage.

• Enterprise-level experience in managing IT Security processes and Engineering initiatives.

• Sound understanding of the NIST framework and CIS Benchmarks.

KNOWLEDGE & TECHNICAL SKILLS

• Firewall Products: Checkpoint, Palo Alto, Cisco

• Analyzer & Management Tools: Algosec, Skybox, Panorama, CPSM

• ZTNA, WAF & Web Proxy: Palo Alto, F5, Zscaler

• Familiar with Cloud technology providers such as Azure and AWS.

• Certifications or official training on any of the above would be an added advantage.

• Basic understanding on Automation/AI/Machine Learning to simplify operations would be an added advantage.

• Excellent team player and fast learner with good leadership skills.

• Good communication and presentation skills.