- Location
- PJC-PJ City, Malaysia
- Type
- Full-time
- Department
- Security
- Seniority
- Lead
- Closing date
- Today
- Source
- Workday
Description
If you are looking to excel and make a difference, take a closer look at us…
Overview:
We are seeking a Team Lead, Security Governance specializing in Network Security Controls to manage a
team of governance specialists and oversee the policy, compliance, and risk management frameworks governing our bank's perimeter defenses.
In this role, you will lead the team acting as the ultimate authority on what security rules should be, ensuring our Firewalls, WAFs, Proxies, VPN infrastructure, and Wireless Access Networks strictly adhere
to banking regulations and internal security standards. You will direct the operationalization, documentation, regular review, and regulatory alignment of every rule, policy, network access pathway,
and application defense mechanism across the enterprise.
Responsibilities:
Team Leadership & Development: Lead, mentor, and build a high-performing team of Security Governance specialists. Manage resource allocation, performance evaluations, professional development, and day-to-day work prioritization.
Strategic Roadmap Execution: Establish operational goals, key performance indicators (KPIs), and long-term roadmap initiatives for the Network Security Governance team aligned with overall enterprise risk management strategies.
Cross-Functional Stakeholder Management: Act as the primary escalation point and bridge between governance, network engineering, Security Operations Center (SOC), enterprise risk, and external regulatory auditors
Security Framework Alignment: Oversee the definition and maintenance of the Bank’s technical security standards, ensuring strict alignment with industry frameworks (e.g., NIST, PCI-DSS, ISO/IEC 27001, SOC 2, CIS Benchmarks).
Policy & Standard Engineering: Guide the review and updating of technical security policies, baselines, and procedures for Web Application Firewalls (WAF), Web Proxies, Enterprise VPNs, Network Access Control (NAC) systems (Cisco ISE), and related perimeter devices.
Audit & Compliance Remediation: Lead technical readiness for internal, external, and regulatory audits. Drive team execution to track, prioritize, and validate the remediation of security findings and vulnerabilities across business units.
Metrics & KRI Reporting: Direct the tracking and executive reporting of Internal, PayNet, and Bank Negara Malaysia (BNM) regulatory Key Risk Indicators (KRIs) regarding control effectiveness.
WAF, NAC & Perimeter Governance: Oversee governance frameworks for WAF deployments (OWASP Top 10, API security baselines), wireless access architectures, 802.1X authentication, firewall rule lifecycles, and proxy/content filtering policies.
Exception & Risk Lifecycle Management: Standardize and supervise the formal evaluation, risk- scoring, and tracking processes for technical exception requests (e.g., emergency port openings, temporary WAF rule bypasses).
Regulatory & Audit Liaison: Serve as the lead subject matter expert and primary representative during central bank, regulatory, and internal audit engagements concerning perimeter and access security.
Skills & Experience We Are Looking For:
Experience: 8+ years in cybersecurity, technical risk, or IT audit, with 2+ years of direct team leadership, supervisory, or line management experience in a complex enterprise environment.
Perimeter Application Security Expertise: Deep technical and conceptual understanding of firewall architectures, Web Application Firewalls, secure web gateways/proxies, VPN platforms, and Cisco ISE identity/NAC frameworks.
Audit & Regulatory Mastery: Demonstrated track record interfacing with financial regulators (e.g., BNM, PayNet) and managing PCI-DSS, network segmentation, and banking compliance regimes.
Certifications: CISSP, CISA, CRISC, or CISM certifications highly preferred (or relevant senior networking/security certifications).
Mindset: A strategic, empathetic team leader who balances rigid process enforcement and audit rigor with pragmatic operational execution.
For more job opportunities, please go to HLB Careers: https://hlb.wd3.myworkdayjobs.com/HLBCareers/
We appreciate your application and will be in touch with shortlisted candidates regarding next steps.
About Hong Leong Bank
We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.
We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our “Digital at the Core” ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.
Realise your full potential at Hong Leong Bank by applying now.
