Senior Information Security Specialist
Kuala Lumpur, MALAYSIA
Job description
Allianz Services is part of Allianz Group, one of the world's leading insurers and asset managers and has succeeded in becoming one individual business segment by combining various businesses from different parent companies. Allianz Services is running service delivery operations in Romania, India, Mauritius and Morocco as well as is operating Consulting hubs in Germany, USA, Italy, France and Singapore with almost 6000 colleagues globally.
Senior Information Security Specialist
The Senior Information Security Specialist will be part of the Protection & Resilience team, ensuring Allianz entities are part of the Protection & Resilience team, ensuring Allianz entities are well-prepared regarding Information Security Risk. This role is responsible for overseeing the identification, assessment, and mitigation of risks to ensure smooth operations of entities in Allianz.
The key responsibilities focus on Information Security, Business Continuity, and Outsourcing.
Information Security
Formulate and implement the information security strategy, risk appetite, policies, and action plans in compliance with Allianz Group standards and regulatory requirements, including MAS, PDPC, and the Cyber Security Agency.
Identify, analyze, and recommend controls and mitigation measures for identified risks.
Monitor emerging technologies and trends to assess their impact on the business environment; lead initiatives to address associated risks while ensuring regulatory compliance.
Ensure the confidentiality, integrity, and availability of systems while managing information security incidents and crises.
Promote a culture of awareness to foster sustainable information security practices.
Collaborate with IT, Risk, Compliance, and Business teams to integrate security requirements into all projects.
Business Continuity Management (BCM)
Develop and implement a robust BCM program aligned with group and regulatory requirements to address emerging risks.
Lead BCM exercises and guide Crisis Management Team members in responding to crisis scenarios.
Identify risks and controls related to BCM through regular exercises and testing.
Oversee BCM reporting to local regulators, the OE Board of Management, and Allianz’s Regional and Global Teams.
Support and coordinate BCM initiatives by working closely with business owners to monitor and address critical processes.
Conduct reviews and self-assessments, presenting findings to committees and driving the implementation of corrective action plans.
Serve as the interface for BCM-related matters with Operational Risk Management, Group Security Offices, and external working groups.
Outsourcing Management
Oversee the implementation of the outsourcing process in accordance with Allianz Group and local policies.
Ensure compliance with local outsourcing regulations and enforce Allianz’s outsourcing policy standards.
Experience
- Minimum of 10 years in business continuity planning/management and IT security, with at least 5 years in cybersecurity and information security governance.
- At least 3 years of experience in outsourcing risk management, preferably in the financial sector.
- Proven track record in leading and facilitating BCM exercises, including Industry-Wide Exercises.
Technical Expertise:
Familiarity with security frameworks such as ISO 27001, COBIT, CIS Top 20, and NIST.
Strong knowledge of technical IT and security concepts, including Active Directory, DNS, firewalls, networking, Web Application Firewalls, DLP, and IPS/IDS.
Practical experience in risk management, change management, and incident management processes.
Familiarity with the Secure Software Development Lifecycle (DevSecOps).
Regulatory Knowledge:
Strong understanding of local outsourcing regulations and MAS guidelines is highly preferred.