Maybank Hiring! Full Time Cyber Emerging Threats Analyst in - Ricebowl

Permanent

Senior Executive

Degree

Computing and IT

Technology

Group Technology

4 - 10 years

Undisclosed

You will assess how emerging technologies, evolving attack techniques and threat actors may impact the Bank's control environment and provide independent, forward-looking insights on emerging cyber risks, identify potential control gaps, and recommend measures to strengthen the Bank's cyber resilience and preparedness against an increasingly complex threat landscape.

A. Emerging Threat Intelligence and Risk Assessment *Monitor the global cyber threat landscape and identify new and emerging threats that may impact the Bank. *Conduct horizon scanning and identify risks before they materialise into security incidents. *Assess risks associated with, but not limited to AI-enabled cyber attacks, Generative AI and Large Language Models (LLMs), Deepfake and synthetic identity fraud, Software supply chain compromises, Cloud-native threats, Quantum computing developments, Ransomware and advanced threat actor techniques, Zero-day vulnerabilities and emerging attack vectors. *Assess the relevance and potential impact of new threat vectors on the Bank's technology and security environment. *Translate emerging threats into practical risk scenarios, control requirements and remediation recommendations. B. Cyber Threat Assurance *Conduct independent assessments of the Bank's preparedness against emerging cyber threats. *Evaluate whether existing security controls remain effective against evolving attack techniques. *Identify control gaps, systemic weaknesses, and areas requiring heightened monitoring. *Perform thematic reviews across key cybersecurity and technology risk domains. C. Risk Scenario Development *Apply adversarial thinking techniques to assess how emerging threat actors may exploit weaknesses in the Bank's controls, processes and technology architecture. *Develop plausible attack narratives and future-state cyber risk scenarios. *Assess implications of emerging threats against MAS Notice FSM-N06 Cyber Hygiene, MAS Technology Risk Management (TRM) Guidelines, operational risk requirements and other relevant regulatory expectations. *Provide recommendations to strengthen preventative, detective, and responsive security capabilities. D. Independent Challenge & Reporting *Provide independent challenge to risk assessments, remediation plans, and control design decisions. *Present findings and recommendations to senior stakeholders and governance committees. *Produce high-quality reports highlighting emerging risks, assurance outcomes, and strategic recommendations. E. Reporting & Governance *Develop executive-level threat intelligence and emerging risk reports for senior management and governance committees. *Communicate complex cyber risks in business and operational resilience terms. *Present emerging threat assessments and control implications to relevant stakeholders. *Support escalation of significant risks, control gaps and thematic findings. *Track management actions and validate remediation effectiveness. F. Strategic Cyber Risk Advisory *Partner with cyber security, technology and risk teams to strengthen cyber resilience. *Provide advisory input on emerging technologies, AI adoption, cloud transformation and evolving threat landscapes. *Contribute to the development of assurance methodologies, threat assessment frameworks and operating procedures for the new function.

*Degree in Cyber Security, Information Security, Computer Science, Information Technology or related discipline with 4 to 10 years of experience in two or more of the following: - Cyber Threat Intelligence - Cyber Defence / SOC Operations - Threat Hunting - Cyber Risk Management - Security Architecture - Cyber Assurance / Audit - Penetration Testing / Red Teaming - Technology Risk Consulting *Experience within banking, financial services, consulting or highly regulated industries is advantageous. Required Skills:- *Are naturally curious about emerging cyber threats, technologies and evolving attack techniques. *Apply critical thinking and are willing to challenge conventional assumptions and established practices. *Possess strong analytical, investigative and problem-solving capabilities. *Can translate complex technical concepts into clear, business-relevant insights and recommendations. *Are confident engaging senior stakeholders and influencing risk and security decisions. *Thrive in dynamic environments, navigate ambiguity effectively, and enjoy solving complex cyber risk challenges. Preferred Skills:- *Strong understanding of the following: - Modern cyber attack techniques and threat actor methodologies - MITRE ATT&CK framework, Attack path analysis, Cyber kill chain concepts - Threat intelligence platforms and intelligence lifecycle - Security controls and cyber defence strategies - Cloud security and modern technology architectures - Vulnerability management and attack surface management - Cybersecurity frameworks (NIST, ISO 27001, CIS Controls) - AI Security frameworks - AI and emerging technology security risks. Professional Certifications (Preferred):- - CISSP - CISM - CRISC - GCTI - GCIH - CEH - SANS Certifications Only shortlisted candidate(s) will be notified.