Cloud Platform Manager

About FWD Group

FWD Group is a pan-Asian life and health insurance business with more than 12 million customers across 10 markets, including some of the fastest-growing insurance markets in the world. The company was established in 2013 and is focused on changing the way people feel about insurance. FWD’s customer-led and digitally enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience.

For more information, please visit www.fwd.com

FWD Technology and Innovation Malaysia Sdn. Bhd., known as FWD TIM, was established in late 2019. Strategically located in Kuala Lumpur, FWD TIM serves as a pivotal shared service location within FWD Group, providing services to multiple markets across the Group. FWD TIM houses a diverse and talented workforce focused on essential business and technology services such as information security, cloud operations, IT solutions delivery, digital and data, actuarial, finance, investments, and customer service, among many others. FWD TIM is dedicated to drive and deliver operational excellence and efficiency, foster innovation and ensure regulatory compliance across all business functions as well as maintain a competitive edge in the market.

PURPOSE.

• This role is part of core cloud CoE team, who will be managing the cloud migration over 600+ apps/systems across 10 LBUs, the responsibility includes managing contractors and 10 BUs IT colleagues.

• Bring industry leading practices around cyber risks and cloud security into the organization.

• Leverage board technical knowledge of security practices of key cloud offerings.

• Establish secure design patterns, architect integrations with security policies and assist in ensuring the security and compliance on Cloud for AWS and Azure, act as the SME for LBUs, educate and transform them into cloud native technology shops.

• Supervise the project delivery management for all the key cloud initiatives, accelerating time to market, adapting to the market and competition, maintaining system stability and reliability Improving the mean time to recovery.

• Lead and manage the Cloud Operation for 10 BUs and all Cloud BAU support related tasks.

• Lead and manage the multi-cloud deployment approach, for example, container orchestration, landing zone deployment, change management and security control for providing resilient, secure and scalable solution.

• Collaborate closely with both Group Infra and Cloud CoE teams for managing operational tasks under the cloud-first strategy.

KEY ACCOUNTABILITIES

• Determine and design the cloud security infrastructure design and architecture with Group Security team.

• Lead cloud security assessments and provide recommendations on required configurations with Group Security team.

• Develop cloud platform-specific security policies, standards, and procedures for management group and account/subscription management and configuration (e.g. Azure Policy, Azure Security Center, AWS Config), identity management and access control, firewall management, auditing and monitoring, security incident and event management, data protection, user and administrator account management, SSO, conditional access controls and password/secrets management.

• Accountable for the cloud security implementation with the delivery team aligning to the Technology Strategy.

• Define cloud security best practices for IT delivery and operations for 10 LBUs. Utilize systems and tools to implement cloud security infrastructure across the software application life cycle.

• Educate other 10 BU’s IT colleague on cloud security and cyber risks to ensure compliance.

• Lead a team of 5+ vendor contractors who are building cloud security infrastructure to reduce number of human manual process needed.

• Design, develop and apply automated infrastructure testing strategies and build automated testing frameworks.

• Lead the Cloud BAU Team to support the migration and operation support.

• Develop and configure test automation networks and execute stability and performance tests.

KEY PERFORMANCE INDICATORS

KPI within 3 years:

• Adopt 100% of application with cloud infrastructure automation enabled.

• Achieve 100% adoption of automatic software deployment.

• Reduce 50% of manual human infrastructure deployment effort.

• Achieve 10x faster software delivery.

• Ensure to achieve 100% infrastructure automation in 10 major markets in FWD.

KPI to enable Polaris strategy:

• Execute the Polaris strategy to facilitate the digital and cloud-enabled transformations:

• Enable 10 BUs to adopt DevOps.

• Reduce the lead time for IT process flow by automation.

• Increase the number of automated infrastructure pipelines delivered in the cloud environment.

• Reduce the number of manual human process required to deploy cloud infrastructure.

KPI on daily basis:

• Rollout and manage automation engineering in all FWD markets.

• Manages cloud infrastructure risks, identifies, determines and recommends risk mitigation solution for deployment and maintenance as appropriate.

EXTERNAL & INTERNAL CONTACTS

• Work very closely to 10 LBU’s Head of IT, drive collaborative execution and coach peer and LBU’s technology teams.

• Manage cross-functional, external and internal partners for LBU’s cloud adoption led initiatives.

• FWD local IT teams (Internal)

- Infra team

- Information Security team

- Solution delivery team

- Project team

• FWD business owners (Internal)

- Operation team / Distribution team / Platform team / Finance team

• IT external vendors (External)

DECISION MAKING

• Determine, promote and execute the best cloud security practice and implementation approaches.

• Design the cloud security approach and technology.

• Allocate manpower and resources to meet timely deadline.

• Design the implementation architecture, approach and technology.

QUALIFICATIONS / EXPERIENCE

• Good understanding and use of IT Cloud concepts including architecture, security, serverless, monitoring, and networking.

• Good understanding of cloud security architecture, security assessments, audit standards for the Cloud, security threats in the cloud

• Excellent interpersonal and communication skills - including verbal, written, and presentation. Ability to tailor communication to audience.

• Analytical, troubleshooting, and research skills with performance issues in production and development environments

• Strong technical aptitude and ability to research and solve complex issues independently.

• At least one-year experience with a cloud provider such as AWS, Azure, Google Cloud Platform, etc.

• In possession of industry recognized cloud security certifications such as CCSK, CCSP, Azure Security Engineer, Azure Solution Architect Expert, AWS Solution Architect Associate/Professional

KNOWLEDGE & TECHNICAL SKILLS

• 7+ years or more or relevant experience, and 2+ years in managing contractors and small team.

• Bachelor Degree in Computer Science, Cyber Security, Information Security, Software Development, or a related field.

• Solid knowledge in security technologies such as firewalls, intrusion detection/prevention, vulnerability scanning, WAF, CASB, cloud security gateways, etc.

• Previous experience in cloud platform in security or infrastructure implementation and operations, also networking and infrastructure automation implementation or operation.

• Proficiency in programming languages such as Python, NodeJS, Java, etc

COMPETENCIES

• Understand business practices, approaches, organization, politics, and culture.

• Promote cloud architecture best practices in-line with functional and company business goals.

• Assess the current technology gap to develop, coordinate and implement changes to meet the new requirements according to critical deadlines.

• Excellent mathematical and problem-solving skills.

• Highly accurate and detail oriented.

• Strongly interested in software development

• Strong sense of responsibility and eager to learn.

• Good command of spoken and written English.