The posting
Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.
The incumbent is responsible for coordinating IT related risk management activities; ensuring compliance to policies and guidelines by PCA and regulatory body & supporting IT audits & reviews.
This role is responsible for supporting the implementation and day-to-day operation of information security controls, assisting with compliance to Group Policies and Procedures, relevant industry practices (i.e PCI DSS, NIST) and applicable regulatory requirements under the guidance of the Manager and senior leadership.
Key Responsibilities:
- Support the implementation and operation of the organization’s information security initiatives in accordance with Group directives, established frameworks and applicable regulatory requirements (i.e. BNM RMiT, PDPA and PCI DSS).
- Assist in identifying and assessing information security and cybersecurity risks, maintaining risk records, and tracking agreed mitigation actions to completion.
- Assist with security-related internal and external audit activities, including evidence collection, submission tracking and follow-up on the closure of findings.
- Support security monitoring, incident response and threat management activities, including coordination with Group SOC and relevant stakeholders for incident handling and escalation.
- Perform security reviews and assist in validating security configurations for applications and infrastructure against established security policies and standards.
- Support cyber resilience and business continuity activities, including preparation for and participation in incident response exercises and cyber tabletop exercises.
- Monitor the security posture and cyber hygiene of the organization’s information assets, track Key Risk Indicators (KRIs), and escalate identified exceptions for further action.
- Prepare routine security reports, dashboards and supporting information for management review and decision-making.
- Support the delivery of security improvement initiatives and assigned project activities to strengthen the organization’s overall security posture.
- Coordinate and support security awareness activities to promote good security practices across the organization.
Qualifications & Requirements:
- Degree in Information Technology, Cybersecurity, Computer Science or a related field.
- Minimum 3 years of relevant working experience in information security, cybersecurity, technology risk or a related area.
- Working knowledge of operating systems, networks, applications and database security best practices.
- Working knowledge of information security standards with the ability to apply established procedures.
Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.
