If you are looking to excel and make a difference, take a closer look at us…
Overview
We are seeking an experienced and versatile Senior Security Advisor & Technical Project Manager to bridge the gap between complex cybersecurity engineering and high-impact business delivery.
In this dual-capability role, you will act as a trusted advisor to senior leadership and clients—architecting resilient security postures, steering critical incident response scenarios, and leading end-to-end technical security projects. You aren’t just overseeing project schedules; you have the deep technical chops to evaluate architectures, challenge technical designs, and guide incident handling when high-severity threats emerge.
Responsibilities:
Strategic Security Advisory & Architecture
Security Maturity & Roadmaps: Evaluate organizational security maturity, compliance gaps and threat models to deliver actionable, business-aligned security roadmaps.
Architecture & Secure Design: Assess and guide secure architecture patterns across cloud, hybrid environments, zero-trust frameworks, network defense, and IAM systems.
Architecture Review Board (ARB) Alignment: Serve as the primary security engineering liaison to the ARB, ensuring proposed solutions align smoothly with enterprise architecture standards.
Solution Advisory: Provide hands-on security architecture guidance to project delivery teams from project inception through post-implementation review.
Incident Response, Cyber Resilience & Escalations
Major Incident Oversight: Act as the senior technical escalation lead for high-severity (P1/P2) security incidents, breach responses, threat hunting escalations, and operational outages.
Root-Cause Analysis (RCA): Direct structural RCAs following critical incidents and conduct analyses on recurring operational bottlenecks, legacy technical debt, and friction points.
Continuous Optimization: Direct remediation roadmaps to ensure long-term resilience and feed operational learnings back into delivery models to streamline engineering workflows.
Commercial & Procurement Ownership
RFP/RFI Technical Leadership: Drive technical requirements and security evaluations for RFIs/RFPs, working directly with Procurement to evaluate and select vendors, software, and third-party partners.
Vendor & Scope Management: Partner with business stakeholders and procurement to ensure vendor SOWs align with delivery outcomes, cost controls, and operational expectations.
Technical Project & Delivery Management
End-to-End Delivery: Scope, budget, resource, and manage complex cybersecurity projects (e.g., SIEM/SOAR deployments, Cloud Migrations, SOC transformations, Zero Trust implementations).
Cross-Functional Leadership: Direct cross-functional teams of security engineers, architects, developers, and third-party vendors.
Executive Stakeholder Management: Bridge technical and executive conversations by translating complex technical risks into clear, business-focused insights for C-level leadership.
Required Qualifications & Experience
Experience
8+ years in information security, with at least 3–5 years leading complex technical projects or consulting engagements.
Proven track record evaluating and advising on enterprise security architectures and cloud security designs.
Direct, hands-on experience in Incident Response (IR), threat analysis, or SOC operations.
Technical Proficiencies
Frameworks & Architecture: In-depth knowledge of Security Architecture principles (Zero Trust, NIST CSF, ISO 27001).
Incident Response & Forensics: Practical understanding of the IR lifecycle (NIST / SANS framework), SIEM/EDR logs, packet analysis, and digital forensics fundamentals.
Cloud & Modern Infrastructure: Hands-on familiarity with security controls in AWS, Azure, or GCP, as well as modern enterprise stack technologies (Container security, API security, CI/CD security).
For more job opportunities, please go to HLB Careers: https://hlb.wd3.myworkdayjobs.com/HLBCareers/
We appreciate your application and will be in touch with shortlisted candidates regarding next steps
About Hong Leong Bank
We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.
We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our “Digital at the Core” ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.
Realise your full potential at Hong Leong Bank by applying now.
Skills Required
- 8+ years in information security
- 3-5 years leading complex technical projects or consulting engagements
- Proven experience evaluating and advising on enterprise security architectures and cloud security designs
- Hands-on experience in Incident Response, threat analysis, or SOC operations
- Knowledge of security frameworks and architecture principles (Zero Trust, NIST CSF, ISO 27001)
- Practical understanding of IR lifecycle, digital forensics fundamentals, packet analysis, and SIEM/EDR logs
- Hands-on familiarity with cloud security controls in AWS, Azure, or GCP
- Experience with container security, API security, and CI/CD security
- Experience scoping and managing cybersecurity projects (SIEM/SOAR deployments, Cloud Migrations, SOC transformations, Zero Trust implementations)
- Experience leading RFP/RFI technical requirements and vendor evaluations with Procurement
- Ability to communicate technical risk to executive (C-level) stakeholders
What We Do
Hong Leong Bank Berhad is one of the leading financial services organisations in Malaysia. With a heritage of more than 100 years, it provides comprehensive financial services covering consumer banking, business banking and trade finance, treasury, branch and transaction banking, wealth management, private banking and Islamic financial services. Its merger with EON Bank Group in 2011 has further embedded its position as a core banking franchise with an expanded distribution network of more than 300 branches across the country. With a proven track record in value creation and a highly recognised brand, Hong Leong Bank has also been extending its footprint in the region, with branches in Singapore and Hong Kong and wholly owned subsidiaries in Vietnam and Cambodia. In China, the Bank has a 20% shareholding in Bank of Chengdu Co., Ltd., Sichuan and a consumer finance joint venture. Hong Leong Bank is a subsidiary of Hong Leong Financial Group Berhad, the financial services arm of the Hong Leong Group. Apart from banking, Hong Leong Financial Group is involved in the provision of insurance and takaful, as well as investment banking, unit trust, fund management and stock broking services
