Senior Manager, Group Information Security Engineering (Cloud)

Drive FWD IT Security Engineering function as a SME for FWD Group and all Business Units (10 Business Units) in Asia Pacific.

Define and partner with stakeholders in a multi-disciplined team structure, designing and implementing cloud security solutions to provide coverage across a variety of projects

Lead stakeholders’ and vendors engagements and providing subject matter expertise to Business Units and engagement teams

Develop deep working relationships with senior executives across engagement teams.

Responsible and execute large-scale project deliveries

Manage teams and mentor junior resources

Oversee Cloud infrastructure and microservices security architecture (inclusive of: container security architecture, data security architecture, network security architecture and operational security architecture).

Review the cloud infrastructure & microservices design against different security regulatory and Insurance industry standards such as GL20 requirements

Ensure that final design addresses identified threats and countermeasures during threat modelling

Build knowledge capital through research and development and leveraging industry insights to deliver best of breed expertise to stakeholders.

Lead the growth of cloud security practice across business units, security operation team, SOC and other stakeholders

Drive IT Security Engineering Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.

Support the Head of IT Security Engineering in defining and maintaining the Cloud First IT Security Engineering framework for FWD Group.

Lead the design, implementation, and optimization of Cloud based security solutions, including Secure web gateways, security brokers, API integrations, VPNs, web proxies, SASE, WAF, NSG protection and micro-segmentation.

Drive the successful delivery of cloud security programs, ensuring alignment with the Group Information Security strategies and business objectives.

Promote healthy risk cultures and good conduct within the group.

Drive awareness and support to Group IT Security, Business Units IT, to understand the IT Security Solutions and Processes, as well as their implications across the organization.

Drive IT Security Engineering Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.

Collaborate with cross-functional teams across Business Units to ensure consistent execution of security initiatives.

Partner with the Head of IT Security Engineering and Group CISO, through tracking and reporting function, to ensure regular updates to management on the IT Security Engineering Program and risks.

Ensure secure network architecture and segmentation aligned with enterprise security standards and regulatory requirements.

Provide technical leadership and mentorship to junior engineers and project teams.

Continuously evaluate emerging cloud technologies and recommend improvements to enhance the security infrastructure.

On Time on Budget delivery of key IT Security Engineering Program uplifts or deployments, aligned with Group IT Security roadmap.

Support the Head of IT Security Engineering in continuous uplift of the IT Security Engineering program.

Ensure IT Security Engineering Program across Business Units is carried out in alignment with the FWD business objectives and defined IT Security Plan timelines.

Group IT Security Engineering Security Framework implementation and controls are delivered in a cost-effective way using processes and resources (including people and technologies) aligned with the FWD business goals.

Group IT Security Engineering support and governance are provided for all Business Units.

IT Security Engineering Program awareness is conducted when necessary.

Doing things right, creating synergies for the overall FWD goals and objectives, along with a people first approach.

Head of IT Security Engineering

Group CISO

Business Units IT Security Teams

Group and Business Units Chief of Technology and Operations

Group and Business Units IT & Operations

Group and Business Units Internal Audit

External Auditors

Vendors and/or Service Providers

Minimum 10 years working experience in IT Security Management role, preferably in Financial Services.

Regional experience in IT Security Technical or Engineering roles.

Strong analytical and problem-solving abilities with a proactive and collaborative mindset.

Degree in Information Technology or equivalent discipline.

Technical experience in Identify, Protect, Detect, Response or Recover areas.

Good understanding of cloud environments with focus on public cloud engineering and operations within (Azure, AWS, GCP etc.)

Secure cloud workload project experience using native tools

Experience with NIST cyber security framework, information security principles, ISO/IEC 27000 series is preferred

Solid experience in handling cybersecurity assessments and IT audit-related assignments and familiar with relevant control requirements from different regulatory bodies such as HKIA.

Solid experience in handling cybersecurity assessments and IT audit-related assignments and familiar with relevant control requirements from different regulatory bodies such as HKIA.

Proven experience with firewalls (e.g., Palo Alto, Check Point), VPNs, load balancers, proxies, and network segmentation.

Proficiency in scripting, automation and infrastructure-as-code.

Excellent interpersonal and influential skills to enable the implementation and enforcement of the IT Security Engineering program.

Good communication and presentation skills.