Job Description

The Head of Security Engineering will lead the design, implementation, and continuous improvement of the banks security infrastructure. This strategic role is responsible for building secure, scalable systems and ensuring compliance with regulatory frameworks such as Bank Negara Malaysias RMiT, ISO 27001, and NIST. The ideal candidate will drive innovation in security architecture, champion DevSecOps practices, and foster a high-performance engineering team.
Key Responsibilities
Leadership & Strategy

• Define and execute the security engineering roadmap aligned with the banks cybersecurity and digital transformation goals
• Lead and mentor a team of security engineers, promoting technical excellence and continuous learning
• Collaborate with senior leadership to align security initiatives with business objectives

Security Architecture & Design

• Architect and implement security controls across on-premise, cloud, and hybrid environments
• Ensure security is embedded in enterprise architecture and application development lifecycles
• Evaluate emerging technologies and recommend secure design patterns

Infrastructure Security Operations

• Oversee deployment and management of firewalls, IPS, DLP, endpoint protection, SIEM, and PAM solutions
• Ensure high availability, scalability, and resilience of security systems
• Monitor system performance and proactively address operational risks

Vulnerability & Threat Management

• Lead the vulnerability management lifecycle: scanning, prioritization, remediation, and reporting
• Collaborate with the SOC team to respond to incidents and mitigate emerging threats
• Conduct threat modeling and penetration testing exercises

Compliance & Risk

• Ensure adherence to RMiT, GDPR, MAS TRM, PCI DSS, and other relevant regulations
• Support internal and external audits, risk assessments, and regulatory reviews
• Maintain documentation and evidence for compliance reporting

DevSecOps Enablement

• Integrate security into CI/CD pipelines and automate security testing
• Promote secure coding practices and support secure SDLC initiatives
• Partner with development teams to embed security early in the software lifecycle

Stakeholder Engagement

• Liaise with business, risk, audit, and compliance teams to align on security priorities
• Provide executive-level reporting on security engineering maturity and effectiveness
• Represent the security engineering function in cross-functional forums

Requirements:

• Bachelors or Masters degree in Computer Science, Cybersecurity, Information Systems, or related field
• 10+ years of progressive experience in cybersecurity, with 5+ years in a leadership role
• Experience in the banking or financial services sector in Malaysia is highly desirable
• Strong technical expertise in cloud security (AWS, Azure), network security, endpoint protection, encryption, IAM, and DevSecOps
• Familiarity with regulatory frameworks: RMiT, GDPR, MAS TRM, PCI DSS
• Certifications such as CISSP, CISM, CCSP, GSEC, or AWS Security Specialty are advantageous

Key Competencies

• Strategic thinking with strong execution capabilities
• Proven leadership and team development skills
• Effective communication with technical and non-technical stakeholders
• Analytical problem-solving and decision-making abilities
• Ability to thrive in a highly regulated, complex, and dynamic environment

Skills Required