Automation Security & Governance Lead

Maybank; Kuala Lumpur; On-site; MYR 120,000 - 240,000; Full time

Job summary

Maybank in Malaysia seeks a Security and Governance Specialist, Automation, to embed security, risk, compliance, privacy, auditability and governance controls across the automation lifecycle. Translate control requirements into practical standards and assurance activities.

You will drive RBAC and least-privilege, coordinate threat/risk assessments, secure design reviews, and provide templates and training to engineering teams to ensure auditable, compliant automation across platforms.

Qualifications

• Bachelor degree in Cybersecurity, Information Technology, Risk, Engineering or related discipline.
• Typically 6+ years in technology security, risk, governance, compliance or audit within a large regulated enterprise.
• Experience with privileged access, RBAC, secure SDLC, change controls, cloud/infrastructure security and audit evidence.
• Ability to translate policies into implementable technical controls.
• CISSP, CISM, CRISC, CISA, ISO 27001, cloud-security or equivalent certifications are advantageous.

Responsibilities

• Embed security, risk, compliance, privacy, auditability and governance controls across the enterprise automation lifecycle.
• Translate control requirements into practical standards, evidence, access models and assurance activities without unnecessarily constraining delivery.
• Define automation control requirements, lifecycle checkpoints, evidence and ownership.
• Consistent and auditable governance across use cases.
• Govern RBAC, segregation of duties, privileged access, service accounts, credentials and recertification.
• Least-privilege access and controlled execution.
• Coordinate threat/risk assessments, secure design reviews, vulnerability findings and remediation.
• Security risks identified and treated before production.
• Maintain control mapping, exceptions, decisions, attestations and audit responses.
• Reliable evidence for risk, compliance and audit review.
• Provide practical patterns, templates and training to engineering and use-case owners.
• Controls are understood and applied consistently.

Skills

RBAC

Segregation of duties

Threat modeling

Risk assessment

Executive communication

Education

Bachelor degree in Cybersecurity, Information Technology, Risk, Engineering or related discipline

CISSP / CISM / CRISC / CISA / ISO 27001 or cloud-security certifications (advantageous)

Tools

AAP/Ansible

Git/CI/CD

APIs

Job description

Maybank in Malaysia seeks a Security and Governance Specialist, Automation, to embed security, risk, compliance, privacy, auditability and governance controls across the automation lifecycle. Translate control requirements into practical standards and assurance activities.

You will drive RBAC and least-privilege, coordinate threat/risk assessments, secure design reviews, and provide templates and training to engineering teams to ensure auditable, compliant automation across platforms.