Cloud Security Manager

Cygnify; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Cygnify is partnering with a leading telecommunications company to hire a Cloud Security Manager. You will drive secure-by-design principles, cloud governance, and security operations across large-scale AWS environments.

You will lead governance strategy, oversee IAM, vulnerability management, incident response, and collaborate with cross-functional teams to embed security into cloud solutions. Strong leadership and AWS security expertise are essential.

Qualifications

• 3–10 years in Cybersecurity with strong Cloud Security experience.
• Hands-on with AWS security services including IAM, GuardDuty, and CloudTrail.
• Experience in cloud security architecture, DevSecOps and IaC (Terraform/CloudFormation).

Responsibilities

• Lead cloud security governance, strategy, and policy development.
• Design and review secure cloud architectures and IAM controls.
• Oversee security operations, vulnerability management, and incident response.
• Collaborate with cross-functional teams to embed security by design.
• Coordinate with security vendors and drive continuous improvement.

Skills

AWS security

Cloud security

Security governance

Incident response

Terraform

IAM

Leadership

Education

Bachelor's degree in CS/IS/Engineering

Tools

Terraform

CloudFormation

AWS Config

GuardDuty

Security Hub

KMS

WAF

Shield

CloudTrail

Macie

Job description

We are partnering with a leading telecommunications company and are looking for an experienced Cloud Security Manager to join their growing cybersecurity team.

This is an exciting opportunity for a cloud security professional to lead and strengthen the security posture of large scale cloud environments, driving secure-by-design principles, cloud governance, security operations, and continuous improvement.

Key Responsibilities

Cloud Security Governance & Strategy

• Develop and maintain cloud security policies, standards, and governance frameworks.
• Drive cloud security strategy aligned with business and security requirements.
• Promote security best practices, including Zero Trust and secure-by-design principles.

Cloud Security Architecture & Engineering

• Design, review, and approve secure cloud architectures.
• Ensure cloud solutions follow security best practices and industry standards.
• Implement and govern Identity and Access Management (IAM), including RBAC, least privilege, strong authentication, and privileged access controls.
• Oversee network and infrastructure security controls.

Cloud Security Operations & Incident Response

• Oversee continuous security monitoring and identify vulnerabilities, threats, and misconfigurations.
• Drive vulnerability management and remediation activities.
• Lead cloud security incident response, including investigation, containment, recovery, and root cause analysis.
• Support automation of security controls and remediation workflows.
• Conduct cloud security risk assessments and threat modelling.
• Support security audits and compliance initiatives.
• Maintain appropriate security documentation and reporting.

Data Protection

• Ensure appropriate security controls for sensitive data, including encryption, access governance, data classification, and data protection measures.
• Provide technical leadership and cloud security expertise.
• Collaborate with cross-functional teams to embed security into cloud solutions.
• Manage and coordinate relevant security vendors and service providers.
• Drive continuous improvement of cloud security capabilities and practices.

Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
• 3-10 years of experience in Cybersecurity, with significant experience in Cloud Security and Cloud Security Architecture.
• Strong hands‑on experience securing AWS cloud environments.
• Experience with AWS security services such as:
• IAM
• Security Hub
• GuardDuty
• CloudTrail
• Config
• Macie
• KMS
• WAF
• Shield
• Experience in Cloud Security Architecture, DevSecOps, and Infrastructure-as-Code (IaC), such as Terraform or CloudFormation.
• Strong knowledge of IAM, least privilege, encryption, network security, and secure cloud design principles.
• Experience with cloud security frameworks, risk assessments, compliance, and audits.
• Strong leadership, stakeholder management, and communication skills.
• Relevant certifications such as AWS Security Specialty, AWS Solutions Architect, CISSP, CISM, or CCSP are advantageous.