Conduct physical safety inspections of EPF buildings/branches to assess weaknesses that need to be improved.
Responsible for procuring approved budget items, planning and budgeting operational security equipment, developing and enhancing electronic security control systems, and maintaining security platforms including CAMS, ACTAS, CCTV, TSCM, and related technologies, including but not limited to AI-powered security control systems, maintaining enterprise platforms including advanced threat detection, identity and access management, and AI-driven analytics for anomaly detection and incident response.
Establish a network with the PDRM to ensure that security information is always up-to-date and maintain a high level of security.
...
Implement and optimize endpoint governance using Microsoft Intune, including configuration profiles, compliance policies, security baselines, and device‑lifecycle management.
Support directory, identity, and device policy integration using Entra ID (Azure AD), ensuring secure authentication, conditional access, and identity‑driven device posture.
Apply and tune Group Policy Objects (GPO) and MECM (Microsoft Endpoint Configuration Manager) for on‑premises and hybrid Windows endpoint management.
...
Incident Response & Forensics - Lead cloud security incident response, including investigation, containment, recovery, and root cause analysis for cloud-related security events.
...
Audit: Drive audit readiness by acting as a point of contact for all internal and external IT security audits and regulatory reviews (including BNM, HKMA, and MAS), ensuring the bank demonstrates high maturity levels and audit readiness at all times. Drive the end-to-end audit lifecycle including PCI-DSS and PwC engagements by coordinating evidence collection, justifying control effectiveness, and tracking all findings to verified closure to minimize compliance risks.
Projects & Change: Enable strategic IT security integration by participating in IT and Business project meetings. Conduct security reviews, risk assessments, and review User Acceptance Testing (UAT) to ensure all deliverables meet necessary security requirements with proper sign-off before deployment.
Housekeeping: Ensure a timely deletion and housekeeping of resigned, dormant, or unused user IDs based on HR cessation notifications to minimize the attack surface.
...
Audit: Drive audit readiness by acting as a point of contact for all internal and external IT security audits and regulatory reviews (including BNM, HKMA, and MAS), ensuring the bank demonstrates high maturity levels and audit readiness at all times. Drive the end-to-end audit lifecycle including PCI-DSS and PwC engagements by coordinating evidence collection, justifying control effectiveness, and tracking all findings to verified closure to minimize compliance risks.
Projects & Change: Enable strategic IT security integration by participating in IT and Business project meetings. Conduct security reviews, risk assessments, and review User Acceptance Testing (UAT) to ensure all deliverables meet necessary security requirements with proper sign-off before deployment.
Housekeeping: Ensure a timely deletion and housekeeping of resigned, dormant, or unused user IDs based on HR cessation notifications to minimize the attack surface.
...
Audit: Drive audit readiness by acting as a point of contact for all internal and external IT security audits and regulatory reviews (including BNM, HKMA, and MAS), ensuring the bank demonstrates high maturity levels and audit readiness at all times. Drive the end-to-end audit lifecycle including PCI-DSS and PwC engagements by coordinating evidence collection, justifying control effectiveness, and tracking all findings to verified closure to minimize compliance risks.
Projects & Change: Enable strategic IT security integration by participating in IT and Business project meetings. Conduct security reviews, risk assessments, and review User Acceptance Testing (UAT) to ensure all deliverables meet necessary security requirements with proper sign-off before deployment.
Housekeeping: Ensure a timely deletion and housekeeping of resigned, dormant, or unused user IDs based on HR cessation notifications to minimize the attack surface.
...
Audit: Drive audit readiness by acting as a point of contact for all internal and external IT security audits and regulatory reviews (including BNM, HKMA, and MAS), ensuring the bank demonstrates high maturity levels and audit readiness at all times. Drive the end-to-end audit lifecycle including PCI-DSS and PwC engagements by coordinating evidence collection, justifying control effectiveness, and tracking all findings to verified closure to minimize compliance risks.
Projects & Change: Enable strategic IT security integration by participating in IT and Business project meetings. Conduct security reviews, risk assessments, and review User Acceptance Testing (UAT) to ensure all deliverables meet necessary security requirements with proper sign-off before deployment.
Housekeeping: Ensure a timely deletion and housekeeping of resigned, dormant, or unused user IDs based on HR cessation notifications to minimize the attack surface.
...
Support Change Management in terms of solution upgrade, enhancements, bug fixes and changes to resolve issues within the IAM system.
Support the resolution on issues highlighted during the IAM system integration testing (SIT), user acceptance testing (UAT) and Production deployments.
Resolve technical issues, including troubleshooting of secondary components such as infrastructure, networking, database, or scripting issues.
...
Prepare project documentation such as Project Plan, Technical Document, Material Document Submission, drawings and OMM.
Participate in the regular meeting of the project, allocate, arrange and complete the relevant work on time according to the meeting requirements and report daily or weekly progress at site.
Manage/Monitor/Track project and control cost to ensure project is completed on time within budget, contractual and safety standard
...
Prepare project documentation such as Project Plan, Technical Document, Material Document Submission, drawings and OMM.
Participate in the regular meeting of the project, allocate, arrange and complete the relevant work on time according to the meeting requirements and report daily or weekly progress at site.
Manage/Monitor/Track project and control cost to ensure project is completed on time within budget, contractual and safety standard
...
Sales Presentations: Prepare and deliver persuasive proposals and presentations that highlight our trained personnel, technology integration, and response times.
Contract Negotiation: Lead the negotiation of contract terms, pricing, and service-level agreements (SLAs) to ensure a win-win partnership.
Pipeline Management: Maintain an accurate and up-to-date sales pipeline within our CRM to track progress and forecast revenue.
...
At least 3-5 years in a dedicated security operations supervisory or management capacity, preferably within the financial services industry.
Proven hands-on experience and in-depth knowledge of managing and operating a wide range of security technologies (e.g., Firewalls, WAF, IPS/IDS, Endpoint Security, NAC, SIEM integration).
Solid understanding of IT governance, risk management, and compliance frameworks (e.g., ISO 27001, NIST, BNM RMiT, PCI DSS).
...
Support the resolution on issues highlighted during the IAM system integration testing (SIT), user acceptance testing (UAT) and Production deployments.
Resolve technical issues, including troubleshooting of secondary components such as infrastructure, networking, database, or scripting issues.
Support planned and actual DR test activities for the IAM systems and infrastructure.
...
Provide comprehensive support for business-critical and regulated (GxP) applications and systems, including but not limited to Pharma Empower and PerkinElmer Spectrum, ensuring controlled access, readiness for backup and restoration, and thorough support documentation.
Coordinate IT support for production equipment computerized systems and equipment (e.g., compression machine, inspection machine, PCs/SCADA/HMI etc.), prioritizing operational stability, managed change control, and prompt vendor engagement.
Ensure records for incidents, problems, and changes are accurately maintained, categorized, assessed for impact, approved, and supported with closure evidence in accordance with IT SOPs and organisational quality standards.
...