Lead, Security Operations Center

Overview

This role will report to the Head of IT Security, Malaysia. The SOC Lead will primarily be responsible for leading Great Eastern Next Generation Security Operations Centre (NGSOC) Team and act as a single point of contact to the management team for further action. Serves as primary escalation point of the SOC Analyst for any identified potential anomalies and will perform in-depth investigation into the matters. In the event of security incident, the SOC Lead will also serve as the primary incident responder and ensure that communications as well as adequate resolutions are implemented on a timely basis.

Responsibilities

• Lead the operation of Next Generation Security Operations Centre (NGSOC).
• Lead and support security operations tasks such as cyber intelligence gathering, threat hunting, Security Monitoring & Log Review (SIEM) and Incident Response.
• Plan, develop & constantly review Security Operations Centre (SOC) related policies, standards and procedures.
• Manage cyber incidents associated with threats, intrusions, compromise, unusual, unauthorized or illegal activity via Incident Response and CSIRT framework.
• Handle escalation from SOC analysts and Managed Security Service Providers (MSSP) ensuring that escalations are handled within agreed Standard Level Agreements (SLAs).
• Collaborate with other functions such as Infra, Network, End User Computing, Cloud, Technology.
• Risk Management, Assurance & Audit and Risk & Compliance team to ensure security tools implementation & security reporting is established as well as manage risk matters adequately.
• Provide regular reports to management on the status of the SOC’s operations, security incidents, and security posture as well as to highlight any potential trend based on SOC metrics.
• Constantly review and upgrade SOC related system component solutions (such as SIEM, SOAR etc) to always ensure effective operational and defense capabilities.
• Identify gaps and propose countermeasures inclusive training requirement for SOC team as well as handling audit and compliance for overall SOC operations.
• Takes accountability in considering business and regulatory compliance risks and takes appropriate steps to mitigate the risks.
• Maintains awareness of industry trends on regulatory compliance, emerging threats and technologies in order to understand the risk and better safeguard the company.
• Highlights any potential concerns / risks and proactively shares best risk management practices.

Qualifications

How you succeed

Who we are

Founded in 1908, Great Eastern is a well-established market leader and trusted brand in Singapore and Malaysia. With over S$100 billion in assets and more than 16 million policyholders, including 12.5 million from government schemes, it provides insurance solutions to customers through three successful distribution channels – a tied agency force, bancassurance, and financial advisory firm Great Eastern Financial Advisers. The Group also operates in Indonesia and Brunei.

The Great Eastern Life Assurance Company Limited and Great Eastern General Insurance Limited have been assigned the financial strength and counterparty credit ratings of "AA-" by S&P Global Ratings since 2010, one of the highest among Asian life insurance companies. Great Eastern's asset management subsidiary, Lion Global Investors Limited, is one of the leading asset management companies in Southeast Asia.

Great Eastern is a subsidiary of OCBC, the longest established Singapore bank, formed in 1932. It is the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s and AA- by both Fitch and S&P. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.

To all recruitment agencies : Great Eastern does not accept unsolicited agency resumes. Please do not forward resumes to our email or our employees. We will not be responsible for any fees related to unsolicited resumes.

Notes

This description is intended for the job posting content and may contain company information that is publicly available.

#J-18808-Ljbffr