Role: Senior/ Cloud Security Lead
Location: Malaysia
We are currently partnering with a leading technology-driven telecommunications organization that is scaling rapidly to support new digital initiatives and platforms. As part of this expansion, multiple roles are open across key functions to help build, maintain, and enhance next-generation solutions. This opportunity offers exposure to large-scale systems, innovative technologies, and a collaborative environment where skills and ideas make a real impact.
Accountabilities:
Establish, maintain, and enforce cloud security policies, standards, and governance frameworks to ensure secure cloud adoption across the organization.
Review and approve cloud solution designs, ensuring secure-by-design principles, threat modeling, and compliance with best practices and reference architectures.
Own and govern cloud IAM strategy, enforcing least privilege, strong authentication, privileged access control, and periodic access reviews.
Oversee continuous monitoring of cloud environments, ensuring timely detection and remediation of misconfigurations, vulnerabilities, and security threats.
Lead cloud security incident response, including investigation, containment, recovery, and root cause analysis for cloud-related security events.
Provide cloud security expertise to stakeholders, lead security teams, manage security tools/vendors, and drive cloud security capability enhancements.
Requirements
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field; Master's degree is a plus.
5+ years of cybersecurity experience, with at least 3+ years focused on AWS cloud security and cloud security architecture.
Strong expertise in AWS security services (e.g., IAM, Security Hub, GuardDuty, CloudTrail, Config, Macie, KMS, WAF, Shield).
Hands-on experience in cloud security architecture, DevSecOps, and infrastructure-as-code (Terraform, CloudFormation).
Proven ability to implement IAM governance, least privilege, encryption controls, network security, and secure cloud design principles.
Experience with cloud compliance frameworks and audits (ISO 27001, SOC 2, CIS, MAS TRM, NIST) and conducting cloud risk assessments.
Relevant professional certifications such as AWS Certified Security - Specialty, AWS Solutions Architect, CISSP, CISM, or CCSP.
cygnify