IT Security Operations Lead

About FWD Group

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 40 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828.

For more information, please visit www.fwd.com

PT FWD Insurance Indonesia (“FWD Insurance”), a joint-venture insurance company and a part of FWD Group, previously known as PT Commonwealth Life, has successfully merged with PT FWD Life Indonesia (“FWD Life”) as of 1 December 2020 and will be known as FWD Insurance.

The merger of FWD Life and FWD Insurance has led to a more comprehensive range of products, including unit-linked insurance, individual & group term life insurance, individual & group personal accident insurance, and group medical insurance through technology driven-distributions such as agency, bancassurance, e-commerce, and corporate.

FWD Insurance is registered and supervised under Otoritas Jasa Keuangan (“OJK”).

FWD Insurance is a member of Indonesia Financial Services Alternative Dispute Resolution Center.

• IT security operation Lead to ensure security practices are deployed and aligned. The increasing threats on
• information security & governance, has put pressure on IT to ensure continuity while serving the complex
• business needs. Support assigned Local or group IT Security Operation. Job Purpose

IT security operation Lead to ensure security practices are deployed and aligned. The increasing threats on

information security & governance, has put pressure on IT to ensure continuity while serving the complex

business needs. Support assigned Local or group IT Security Operation.

Key Responsibilities

Lead the SecOps team (2 NFTE) in daily activities related to Internal Vulnerability Management (IVM),

monitor and oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to External Vulnerability Management (EVM),

monitor and oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Security Configuration, monitor and

oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Web Application Firewall (WAF), monitor

and oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Cloud Security, monitor and oversee

progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Endpoint Compliance, monitor and

oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Threat Intelligence Alerts, monitor and

oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Incident Handling, monitor and oversee

progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Patch Advisory, monitor and oversee

progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to DLP Alerts & Whitelisting Email and Web,

monitor and oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Phishing Simulation, monitor and oversee

progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Mandatory Training & Handbook Sign,

monitor and oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to IAM and CyberArk PIDs, monitor and

oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to User Access Matrix (UAM) and User

Access Review (UAR), monitor and oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Patching Management, monitor and

oversee progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Production Issues, monitor and oversee

progress, and coordinate results and issues with BISO.

Lead the SecOps team (2 NFTE) in daily activities related to Update Asset Inventory, monitor and

oversee progress, and coordinate results and issues with BISO.

To consult and coordinate all SecOps team activities with Group Information Security functions based

on guidance from BISO.

Key Qualifications

Minimum 10 years of experience in IT Security.

Bachelor’s Degree in Information Technology or a related field.

Proficient in using and operating Zscaler, CyberArk, Qualys, Orca, iTunes, ManageEngine, Blackkite,

and CrowdStrike.

Strong knowledge in incident detection, analysis, response, and remediation of security events.

Experience in engineering, configuration, and troubleshooting of security systems.

Familiarity with ISO 27001 is an advantage.

Good understanding of endpoint protection, including servers, laptops, PCs, and firewalls.

Strong knowledge of Next-Generation Firewalls (NGFW), Security Information and Event Management

(SIEM), and Web Application Firewalls (WAF).

FWD Core Competencies

Proactive

Be positive: Operate with a “can do” mindset

Think ahead: Anticipate needs and empowered to take action without waiting to be told what to do

Continuous Improvement: Seek out ways to raise the bar

Innovative

Dare to be different: Find unique and creative solutions by thinking out of the box

Be adaptive: Open to new ideas and embrace change

Be ambitious: Take calculated risks, seize opportunities to learn and grow from failure

Committed

Deliver on our promises: Follow through on commitments and meet deadlines

Be the best we can be: Strive for high-quality work and persevere to stay focused

Celebrate teamwork: Work collaboratively to achieve more

Caring

Demonstrate customer-led approach: Prioritise customer needs and deliver exceptional value

Seek to understand: Listen with empathy and consider diverse perspectives

Treat everyone with respect: Use polite language, a courteous tone and embrace Diversity, Equity

& Inclusion (DEI)

Open

Be transparent: Share knowledge to empower others and foster trust

Make the right decisions: Involving others, manage and mitigate risks and be decisive

Champion integrity and ethics: Consider the impact of your actions and speak up when you feel

something is wrong

Competencies

Vulnerability Management

Page: 3 of 3

CEH Certification

Information Security Operation

Patch Management

Endpoint compliance

ISO270001

Incident Handling

Internal/External Audit

Performance Indicators

4 Key Risk Indicators (KRIs) of Cybersecurity from Group Information Security (GIS) are reported in the

monthly GIS Management Report, with most KRIs consistently maintained at Low Risk.

Implementation of cybersecurity tools and initiatives to strengthen the organization’s security posture.

Endpoint protection: Daily updates of antivirus databases to ensure up-to-date threat defence.

Real time 24/7 Monitoring of Security Information & Event Management

Full protection of FWD systems' availability, confidentiality, and integrity from external compromises.

Support for all operational processes to maintain quality and service levels for IDBU customers and

stakeholders.

Timely