About UOB 

United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of around 500 offices in 19 countries and territories in Asia Pacific, Europe and North America. UOB's purpose is to build the future of ASEAN. Our purpose guides The UOB Way – that defines our unique culture and belief system, anchored on our values of being Honourable, Enterprising, United and Committed, and our people philosophy of Care, Growth and Trust. 

About The Department 

UOB Innovation Hub 2 (InnoHub2) is a UOB-wholly owned subsidiary and a Centre of Excellence based in Malaysia, providing Group Business Services (GBS) to support the UOB Group. Started in 2021 with technology application design, development and support, InnoHub2 is expanding beyond technology services to deliver other business services to support the Bank’s growth ambition. We are looking for talented and motivated individuals to be part of the pioneer team spearheading the development and delivery of the new services. 

As part of the InnoHub2 team, you will have the opportunity to work on Group initiatives and gain regional business exposure. We are dynamic, passionate and purposeful about delivering trusted financial solutions that enables business growth. An exciting career progression with varied opportunities awaits you at IH2. Come grow your career with us. 

Job Responsibilities

The Senior Security Engineer will lead and support the day-to-day operations and development of the bank security suite of products with key objective in designing, developing, deploying, maintaining and enhancing the Bank’s Data Security capabilities, which includes but is not limited to Data Loss Prevention (DLP), E-Mail Encryption and Cryptographic Key Management and Operations

• Support execution of DLP strategies and initiatives, including to deploy and maintain data security solution and infrastructure deployed within the Bank
• Transform business requirements to effective data security rules with consideration to operational impact
• Product research and define requirements for new projects, perform product evaluation and technical Proof of Concept
• Drive upgrades and migration to ensure Data Security solutions and or related platforms are maintained in tip-top working conditions with proper documentation and RCA
• Manage and coordinate change process engagement with regards to current Data Security solutions
• Continuously assess and understand the Bank’s attack surface and exposure in relation to leakage of Bank’s sensitive information
• Drive a culture of continuous improvement; Identify, recommend and implement robust measures, process enhancements or new capabilities
• Provide support for all Audit and Regulatory requests
• Communicate effectively with a variety of internal teams and third party service providers/vendors for the delivery of Data Security services/solutions
• Capable of managing a variety of priorities and deliverables in an operational, interrupt driven environment with minimal guidance or supervision
• Manage incidents and work within established practices and guidelines for prompt response times and effective resolution
• Work with internal technical teams and engineers in technical troubleshooting and forums
• Resolve standard/routine issues with no guidance and complex/unusual issues with minimal guidance
• Stay updated with emerging trends in cybersecurity technologies and integrate innovative approaches into the bank's overall security strategy

Job Requirements 

• Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution
• Professional qualification in information security, such as CISSP / CISM / CEH, or data Security product certifications will be advantageous.
• 7 to 9 years of relevant experience in managing and deploying Data Security technologies
• Hands-on experience in implementing and operationalizing data protection solutions (e.g. data classification, labelling, encryption, DLP)
• Proven track record in leading successful DLP projects and implementing data security technologies
• Working experience with other cybersecurity products such as SIEM, threat intelligence, security incident response and forensic investigation, network and endpoint protection would be advantageous
• Strong understanding of cybersecurity principles and frameworks including ISO 27001 & NIST Cybersecurity Framework
• Knowledgeable with the variety of Data Security technologies and familiar with the industry trends and best practices
• Proficiency with open systems (eg. Windows, Unix,Linux), networking technologies (routers/firewalls), end user technologies (Windows, iOS, Android), endpoint management platforms (e.g. MDM) and cloud technologies (eg. AWS, Azure, M365, GCP) in relation to Data Security
• Knowledgeable with cryptographic standards and secure data transmission methodologies
• Willingness to perform on-call duties as and when required