Human Security Risk Management Lead
Kuala Lumpur, Malaysia
ABOUT US
We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy.
We’re unique too. We were established to find a better way for the global financial community to move value – a reliable, safe and secure approach that the community can trust, completely. We’re always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust. Five decades on, our vibrant community reflects the complexity and diversity of the financial ecosystem. We innovate diligently, test exhaustively, then implement fast. In a connected and exciting era, our mission has never been more relevant. Swift now has a presence in 200+ countries and legal territories to serve a community of more than 12,000 banks and financial institutions.
What to expect
In this role, you will:
- Develop, implement and ensure that our Human Security Risk Management (HSRM) program communicates, promotes and reinforces our strong security culture, policies and requirements globally across all levels of the organization.
- Ensure that our global HSRM program meets all company policies, industry regulations, standards, and compliance requirements on cyber and physical security.
- Stay abreast of latest cybersecurity threats and industry trends on HSRM, continuously evolving training content to address emerging risks, compliance requirements and employee learning preferences.
- Champion a forward-thinking HSRM awareness and training strategy that not only addresses current risk but anticipates future challenges.
- Oversee the end-to-end development, execution and continuous improvement of a variety of high-quality, engaging, up-to-date and informational security awareness training materials including e-learning modules, videos, infographics, articles, newsletters, workshops, presentations, and events, etc., that are relevant to the current threat landscape and delivered on a timely basis,
- Identify key areas of human, cyber and physical security risks within the organization and develop targeted training materials to address threats.
- Lead the roll-out and management of HSRM awareness initiatives across multiple regions, ensuring cultural relevance for diverse global teams.
- Measure, monitor, and assess the effectiveness and efficiency of the HSRM program and trainings through feedback, surveys, performance metrics, and analytics, making improvements as needed to ensure continuous optimization and measurable reductions in security incidents.
- Identify and provide regular reporting to senior leadership and global stakeholders, including auditors and regulators, on the top human security risks to our organization and the behaviors that need to change to mitigate risks, through clear metrics.
- Collaborate with leadership and different cross-functional global teams to ensure alignment of HSRM awareness initiatives with overall company objectives.
- Collaborate with subject matter experts to ensure accuracy, relevance, successful delivery, and effectiveness of HSRM content.
- Develop and maintain HSRM awareness policies, procedures, and guidelines.
- Participate in audits and assessments to meet governance and compliance requirements.
- Lead and coach team of HSRM personnel, encouraging collaboration and creativity, managing performance by setting and measuring against clear objectives that deliver to the highest quality levels and in line with applicable controls.
- As the most senior Global Security personnel at the Kuala Lumpur office, manage and mentor junior members of Global Security teams on site.
- As needed, at the direction of global leadership provide ad-hoc operational support and deployments.
Skills and Experience
- Exceptional written and verbal communication skills, and proven ability to translate security and risk to all levels of the business, using clear and concise language, and engaging and creative methods.
- Strong leadership and management skills, and ability to motivate and inspire the team.
- High level of professionalism, integrity, and ethics.
- Experience reporting to senior management on HSRM metrics, risk management, and governance.
- Proven ability to form complex ‘communications / messages’ in a simple, clear, and concise manner to the various communities within our organization. This can include different cultures, nationalities, international locations, and languages.
- Display practical knowledge of different message distribution techniques to ensure end user communities understand and continually apply the required behavioral change necessary to reduce the ‘human factors’ risk.
- Real doer/delivery oriented: making things happen. Enthusiastic and dynamic individual willing to "roll up the sleeves" and contribute to the overall objectives and deliverables of the team
- Proficient in using Learning Management Systems (LMS), and security awareness and training tools.
- Strong project management experience with proven ability to plan, manage, prioritize, communicate, and maintain multiple complex, organization-wide programs and initiatives over long term, including co-ordinating the activities of matrixed teams, in a fast-paced environment.
- Strong collaborator with excellent interpersonal skills, adept at fostering positive relationships with a variety of people in Global Security, IT, Legal compliance, HR, Corporate Communications, and other departments in the business, building trust and rapport.
- Fluent in English (spoken and written)
Preferred qualifications:
- Bachelor’s degree or equivalent experience in Information Security, Education, Communications, or a related field.
- Minimum 8+ years of proven experience in content development, instructional design, or a similar role, preferably in IT/cyber security and/or risk management with a significant focus on security awareness and training at an enterprise scale.
- At least 7 years of management experience, managing large, complex security awareness programs.
- Strong understanding of information security and HSRM principles and frameworks.
- Certification in Information Security (e.g., CISSP, CISM) or Instructional Design (e.g., CPLP) is a plus.
- Experience in highly regulated environments, especially in the financial services industry is highly preferred.
What will make you successful?
- Staying up to date with the latest trends and developments in information security and incorporate them into training materials.
- Customer oriented and quality-oriented attitude.
- Open-minded, curious, creative problem solver and solutions oriented.
- Adaptability and responsive to change.
- Pro-active, open, and trusted teammate.
- Excellent English communication skills (both spoken and written).
- Experience in a global organization in the financial services industry.
- Ability to operate in a fast-paced, ever-evolving technological landscape.
What we offer
We put you in control of career
We give you a competitive package
We help you perform at your best
We give you the freedom to be yourself
We give you the freedom to be yourself. We are creating an environment of unique individuals – like you – with different perspectives on the financial industry and the world. A diverse and inclusive environment in which everyone’s voice counts and where you can reach your full potential.
If you believe you require a reasonable accommodation to participate in the job application or interview process, please contact us to request accommodation.
Don’t meet every single requirement? At Swift, we are dedicated to building a workplace where people can bring their full selves and ideas to the team, so if you are excited about this role, we encourage you to apply even if you do not meet every single qualification.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Analytics Audits CISM CISSP Compliance Governance Risk management Strategy
Perks/benefits: Career development Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.