- Design and implement security architectures that protect cloud environments, including data encryption, identity management, and secure access controls.
- Conduct risk assessments to identify potential security vulnerabilities in cloud environments and develop strategies to mitigate them.
- Ensure cloud architectures comply with industry standards, regulations, and organizational policies, such as GDPR, HIPAA, PCI-DSS, and others.
- Implement automated security controls and monitoring solutions to detect and respond to security threats in real-time.
- Design and enforce IAM policies and roles, ensuring least-privilege access across all cloud resources.
- Implement strategies for data protection, including encryption, key management, and data loss prevention (DLP) in the cloud.
- Develop and maintain incident response plans specific to cloud environments, and lead efforts during security incidents.
- Work closely with DevOps, IT, and application development teams to integrate security into the CI/CD pipeline and ensure secure code practices.
- Conduct security training and awareness programs for teams, ensuring a strong security culture throughout the organization.
- Create and maintain comprehensive security documentation, including policies, procedures, and architecture diagrams.
- Provide leadership and mentorship to security engineers and other IT staff, helping them develop their cloud security expertise.
- Build trust relationships with customer stakeholders at all levels - CIO/CISO, Security Operations Centre Managers, end users etc. through open and effective communication.
- Identify, understand, and assess customers' needs, problems, and challenges. Make the right recommendations to improve their situation and work towards to be their trusted advisor in cybersecurity.
- Reinforce value proposition of the MSSP service by understanding customers' environment and identifying additional monitoring opportunities to enhance customer cybersecurity posture. Work with sales teams on new opportunities and renewal strategies.
- Plan, oversee and lead projects during onboarding phase. Work and interact with various internal and external customer stakeholders.
- Create project plan, set deadlines, coordinate activities between different teams, monitor and report project progress to key stakeholders.
- Perform regular cadence meetings with customers during operational phase to review security posture and service improvement initiatives.
- Develop customized service delivery reports to enhance insights and value of the MSSP service.
- Handle customers' complaints, provide solutions and follow up to ensure resolution. Act as an escalation contact for customers to drive and escalate issues within the organization.
Want more jobs like this?
Get jobs in Kuala Lumpur, Malaysia delivered to your inbox every week.
- Education: Bachelor or master degree with minimum 15+ years of experience in information security, with at least 2-3 years focusing on cloud security.
- Proven experience in designing and implementing security solutions in cloud environments such as AWS, Azure, or Google Cloud.
- Certifications: Relevant cloud certifications (e.g., AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate).
- Security certifications such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or Certified Information Security Manager (CISM).
- Technical Skills: Deep understanding of cloud security principles, including shared responsibility models, data protection, and network security in the cloud.
- Experience with cloud security tools and services, such as AWS Security Hub, Azure Security Center, and Google Cloud Security Command Center.
- Strong knowledge of security technologies such as firewalls, IDS/IPS, SIEM, DLP, and endpoint protection.
- Familiarity with Infrastructure as Code (IaC) and automation tools like Terraform, CloudFormation, or Ansible, Python
- Experience with threat modeling, vulnerability management,
- Soft Skills: Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
- Leadership and mentorship skills, with experience guiding and developing security teams. Analytical thinking and problem-solving abilities.