Technical Security Assurance Specialist (P3)

A Global Insurance firm is seeking an experienced Technical Security Assurance Specialist to join their cybersecurity team.
You will be responsible for validating that security requirements defined during the design phase are correctly implemented across systems, applications, and infrastructure
You will conduct technical security assessments, identify security vulnerabilities, evaluate the effectiveness of security controls, and provide actionable recommendations to strengthen the organization's security posture.

Responsibilities:
- Validate that security requirements defined during the design phase are correctly implemented within systems, applications, and infrastructure
- Perform technical security assessments covering areas such as: Network segmentation, Encryption implementation, Privileged access management, Data masking, Authentication and authorization controls and so on
- Identify security vulnerabilities, weaknesses, and control gaps through technical investigations and security reviews
- Assess the severity, business impact, and risk associated with identified vulnerabilities
- Recommend practical remediation measures and work with engineering teams to ensure successful implementation
- Conduct follow-up assessments to verify remediation activities and ensure security improvements are effective
- Perform security audits to ensure compliance with internal security policies and industry standards
- Evaluate security controls against frameworks such as ISO 27001, NIST, and PCI DSS
- Prepare comprehensive security assessment reports, documenting findings, risks, remediation recommendations, and implementation priorities
- Communicate technical findings clearly to both technical and non-technical stakeholders
- Collaborate with infrastructure, development, operations, and security teams to improve overall security posture

Required Skills:
- 3–5+ years of experience in technical security assessments, security assurance, penetration testing, or security auditing
- Hands-on experience validating the implementation and effectiveness of security controls across applications, infrastructure, and enterprise environments
- Strong understanding of network security, including network segmentation, firewalls, secure network architecture, and access controls
- Experience assessing encryption, privileged access management (PAM), identity and access management (IAM), authentication/authorization, and data masking controls
- Knowledge of vulnerability assessment methodologies, risk analysis, and remediation planning
- Familiarity with security frameworks and industry standards such as ISO 27001, NIST Cybersecurity Framework, PCI DSS, and CIS Controls
- Ability to identify security gaps, evaluate their business impact, and provide practical, risk-based recommendations
- Experience working collaboratively with cross-functional teams, including infrastructure, development, and security teams

Why should you apply:
- Our client is one of the biggest global insurance companies in the world
- You will be working with the international team, and with best technologies in the insurance domain
- 50% WFH and 50% Work from Office


Company Details: 
One of the world's largest insurance - financial groups, trusted by over 50 million customers. The company provides various financial protections including general insurance, life insurance, retirement funds, and inheritance throughout the lifetime for individual customers, small businesses, and large companies.

Working Hours: 9:00 – 17:00 (Mon-Fri)
Working Style: Hybrid (2 days in office & 3 days’ work from home every week)
Holidays: Saturday, Sunday, and National Holidays, Year-end and New Year Holidays, Paid Holidays, Other Special Holidays
Services/Benefits: Social insurance, Transportation Fee, No smoking indoors allowed (Designated smoking area), etc.
Interview Process: 3~4 times