Senior Manager, IT Monitoring Security

Established in Asia in 2013 with a trailblazer mentality, FWD is the primary insurance business of investment group, Pacific Century Group (PCG), with minority shareholders Swiss Re Group, GIC Ventures, RRJ Capital and Hopu Investments.

FWD spans 10 markets in Asia including Hong Kong SAR & Macau SAR, Thailand, Indonesia, the Philippines, Singapore, Vietnam, Japan, Malaysia and Cambodia. In Hong Kong, FWD offers life and medical insurance, general insurance, employee benefits, and financial planning. We focus on creating fresh customer experiences and making the insurance journey simpler, faster and smoother, with innovative propositions and easy-to-understand products, supported by digital technology. Through this customer-led approach, FWD aims to be a leading pan-Asian insurer by changing the way people feel about insurance.

If you are looking for a company where can fuel your inspiration and cultivate your expertise, join us on our exciting journey.

PURPOSE
- Drive FWD IT Security Engineering function as a SME in monitoring security for FWD Group and all Business Units in Asia Pacific.
- Drive IT monitoring security Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.

KEY ACCOUNTABILITIES
- Define and partner with stakeholders in a multi-disciplined team structure, designing and implementing monitoring security solutions to provide coverage across a variety of projects
- Develop deep working relationships with senior executives across engagement teams.
- Responsible to initiate and execute large-scale project deliveries with close collaboration with relevant project managers
- Manage teams and mentor junior resources
- Oversee monitoring security architecture (inclusive of: container security architecture, data security architecture, network security architecture and operational security architecture).
- Review the monitoring security design against different security regulatory, industry and internal standards such as PCI DSS and CSA Containers' security guidelines and identifying the necessary security architecture requirements for the same.
- Ensure that final design addresses identified threats and countermeasures during threat modelling
- Lead the growth of monitoring security practice across business units, project team and other stakeholders
- Drive awareness and support to Group IT Security, Group IT and Business Units IT, to understand the monitoring Security Solutions and Processes, as well as their implications across the organization.
- Drive IT Security Engineering Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.
- Support the Head of IT Security Engineering in defining and maintaining the IT Security Engineering framework as well as providing regular management reporting.

QUALIFICATIONS / EXPERIENCE
- Must have a solid knowledge of implementing Splunk Enterprise.
- Proven experience of delivering complex projects
- Ability to communicate complex concepts to mosaic stakeholders
- Ability to be self-managed and driven by business and personal goals
- Minimum 8 years working experience in IT Security Management role, preferably in Financial Services.
- Regional experience in IT Security Technical or Engineering roles.
- Degree from Information Technology or equivalent discipline.
- Technical experience in Identify, Protect, Detect, Response or Recover areas.

KNOWLEDGE & TECHNICAL SKILLS
- Certifications or official training on Splunk.
- General networking and security troubleshooting (firewalls, routing, NAT, etc.)
- Splunk implementation and troubleshooting experience.
- Experience with Splunk Enterprise Security or integration with other Security Information and Event Management (SIEM) platforms.
- Proficient at data on-boarding activities including routing, parsing, and normalizing events to the Splunk Common Information Model (CIM).
- Experience collaborating with separate engineering teams to configure data sources for Splunk integration.
- Experience onboarding data into Splunk via forwarder, scripted inputs, TCP/UDP, and modular inputs from a variety of sources.
- Proficiency managing Splunk using the Splunk command-line interface
- Excellent interpersonal and influential skills to enable the implementation and enforcement of the IT Security Engineering program.
- Good communication and presentation skills.