Security Engineer

We are looking for an Information and Cyber Security Engineer to help with the
acceleration of the UOBAM cloud adoption and overall technology strategy. The
applicant will have a strong background in IT Information and Cyber Security Manager
with a strong understanding and at least 2 years experience with Public, Private and
hybrid cloud.
Information and Cyber Security Manager involved in performing IT Security Risk
Assessment, Information Security Due diligence on Third Party, review of Tech
Obsolescence Risk and supporting the businesses as the subject matter expert on all IT
Security matters, to ensure risks are highlighted for business evaluation and decision
making on a timely manner

Plan and conduct IT Security Risk Assessment on UOBAMs systems throughout
the lifecycle covering different layers of technology architecture to identify
possible security risks, advise and evaluate the mitigation controls and measure
the residual risk.
Manage third party IS Due diligence on UOBAMs service suppliers, including onsite assessments when required.
Involve in Tech Obsolescence Risk program and identify security risks resulted
from obsolescence.
Lead the targeted workstreams and support ad-hoc assignments as requested
Collaborate closely with technology and business stakeholders to ensure security
risks are identified, communicated, understood therefore an informed decision on
risk can be made.
As a trusted partner and subject matter expert, provide security advisory to
technology and business teams.
As the HQ function, guide and support IS teams of subsidiaries to ensure
oversight and consistency on IT security risk management.
Support the IT Security risk committees to ensure robust IT Security risk
governance.