Manager, Cloud SRE

About FWD Group

FWD Group is a pan-Asian life and health insurance business that serves approximately 30 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and digitally enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance.

For more information, please visit www.fwd.com

FWD Vietnam Technology Company Limited., known as FWD VTC, was set up in 2024 and is part of FWD Group. FWD VTC in Vietnam is one of FWD Group’s office locations serving multiple markets within the Group and employs team members in various functions including Group Technology and Operations, Group Digital & Data and our Centre of Excellence comprising cloud & infrastructure, information security, enterprise architecture and solution delivery.

• This role is part of core cloud CoE team, who will be managing the cloud migration over 600+ apps/systems across 10 LBUs, the responsibility includes managing contractors and 10 BUs IT colleagues. This manager will be managing at least 5+ contractors and 30+ local IT colleagues in each BU.
• Bring industry leading practices around cyber risks and cloud security into the organization
• Leverage board technical knowledge of security practices of key cloud offerings
• Establish secure design patterns, architect integrations with security policies and assist in ensuring the security and compliance on Cloud for AWS and Azure, act as the SME for LBUs, educate and transform them into cloud native technology shops.
• Supervise the project delivery management for all the key cloud initiatives, accelerating time to market, adapting to the market and competition, maintaining system stability and reliability Improving the mean time to recovery
• Lead and manage the Cloud Operation for 10 BUs and all Cloud BAU support related tasks
• Lead and manage the multi-cloud deployment approach, for example, container orchestration, landing zone deployment, change management and security control for providing resilient, secure and scalable solution
• Collaborate closely with both Group Infra and Cloud CoE teams for managing operational tasks under the cloud-first strategy.

KEY ACCOUNTABILITIES

• Determine and design the cloud security infrastructure design and architecture with Group Security team
• Lead cloud security assessments and provide recommendations on required configurations with Group Security team
• Develop cloud platform-specific security policies, standards, and procedures for management group and account/subscription management and configuration (e.g. Azure Policy, Azure Security Center, AWS Config), identity management and access control, firewall management, auditing and monitoring, security incident and event management, data protection, user and administrator account management, SSO, conditional access controls and password/secrets management.
• Accountable for the cloud security implementation with the delivery team aligning to the Technology Strategy
• Define cloud security best practices for IT delivery and operations for 10 LBUs. Utilize systems and tools to implement cloud security infrastructure across the software application life cycle
• Educate other 10 BU’s IT colleague on cloud security and cyber risks to ensure compliance
• Lead a team of 5+ vendor contractors who are building cloud security infrastructure to reduce number of human manual process needed.
• Design, develop and apply automated infrastructure testing strategies and build automated testing frameworks.
• Lead the Cloud BAU Team to support the migration and operation support.
• Develop and configure test automation networks and execute stability and performance tests.

QUALIFICATIONS / EXPERIENCE

• Good understanding and use of IT Cloud concepts including architecture, security, serverless, monitoring, and networking.
• Good understanding of cloud security architecture, security assessments, audit standards for the Cloud, security threats in the cloud
• Excellent interpersonal and communication skills - including verbal, written, and presentation. Ability to tailor communication to audience.
• Analytical, troubleshooting, and research skills with performance issues in production and development environments
• Strong technical aptitude and ability to research and solve complex issues independently
• At least one-year experience with a cloud provider such as AWS, Azure, Google Cloud Platform, etc.
• In possession of industry recognized cloud security certifications such as CCSK, CCSP, Azure Security Engineer, Azure Solution Architect Expert, AWS Solution Architect Associate/Professional

KNOWLEDGE & TECHNICAL SKILLS

• 9+ years or more or relevant experience, and 3+ years in managing contractors and small team.
• Bachelor degree in computer science, Cyber Security, Information Security, Software Development, or a related field.
• Experience with containers platforms (Docker EE or Openshift) and orchestration (Swarm, Kubernetes, Azure Kubernetes or AWS Elastic Kubernetes)
• Solid knowledge in security technologies such as firewalls, intrusion detection/prevention, vulnerability scanning, WAF, CASB, cloud security gateways, etc.
• Previous experience in cloud platform in security or infrastructure implementation and operations, also networking and infrastructure automation implementation or operation
• Proficiency in programming languages such as Python, NodeJS, Java, etc