Cloud Security, Risk & Compliance Specialist

FrieslandCampina; Petaling Jaya; On-site; MYR 180,000 - 280,000; Full time

Job summary

FrieslandCampina is seeking a Cloud Security, Risk & Compliance Specialist to strengthen cloud posture across AWS and Azure in the Cloud & Hosting Department. You will translate security requirements into guardrails, automation and policy-as-code to ensure audit readiness and continuous compliance.

The role focuses on CSPM, CDR/XDR integration, SIEM/SOAR alignment and collaboration with SOC, DevOps and service owners. Based in Petaling Jaya with global scope and cross-region coordination.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• Preferred certifications include CCSP, Azure Security Engineer Associate or AWS Certified Security – Specialty.
• Hands-on knowledge of AWS and Azure security, CSPM, CDR, XDR, SIEM, SOAR.

Responsibilities

• Define security standards, baseline controls and compliance guardrails across AWS, Azure and Cloud Edge Services.
• Strengthen CSPM through secure-score improvement and remediation visibility.
• Automate security controls across cloud accounts, subscriptions and workloads.
• Drive IAM governance, least privilege, RBAC, reviews and secrets management.
• Implement policy- and compliance-as-code using Azure Policy, AWS SCPs, Terraform, Bicep or CloudFormation.
• Embed security checks into CI/CD and provisioning pipelines.
• Support CDR across cloud control planes, identities, networks and runtimes.
• Integrate cloud alerts with SIEM, SOAR and XDR for detection and response.
• Define security standards for non-prod environments and enable drift detection.

Skills

Cloud security

CSPM

IAM governance

Policy-as-code

CI/CD security

SIEM/SOAR/XDR

Azure/AWS security

RBAC

Security standards

Education

Bachelor’s degree in Computer Science/IT/Cyber Security/Cloud Computing/Engineering

Certifications: CCSP, Azure Security Engineer Associate, AWS Certified Security – Specialty

Tools

Trend Vision One/Cloud One Conformity

Microsoft Defender for Cloud

Sentinel/Defender XDR

Job description

Cloud Security, Risk & Compliance Specialist

Petaling Jaya (MY) IT & Digital 32-40

Can you strengthen cloud security posture, detection and compliance across a global multi-cloud landscape?

Join FrieslandCampina as Cloud Security & Compliance Specialist in the Cloud & Hosting Department. You will help secure AWS and Azure platforms through cloud governance, CSPM, CDR/XDR integration, IAM guardrails, policy-as-code, audit readiness and continuous compliance.

We are looking for a Cloud Security, Risk & Compliance Specialist to join the Cloud & Hosting Department and strengthen secure, compliant and scalable cloud adoption across FrieslandCampina. You will work across AWS and Azure, translating security and compliance requirements into guardrails, reusable patterns and automated controls.

A key focus is Cloud Security Posture Management (CSPM), providing visibility into misconfigurations, vulnerabilities, exposures and compliance gaps. You will also support Cloud Detection and Response (CDR) and Extended Detection and Response (XDR) by integrating cloud security signals with SIEM, SOAR and XDR platforms. Working with Cloud & Hosting, Cloud Architects, Cyber Security, SOC, DevOps, service owners and suppliers, you will support cloud onboarding, risk remediation and continuous improvement.

Key responsibilities

• Define security standards, baseline controls and compliance guardrails across AWS, Azure and Cloud Edge Services.
• Strengthen CSPM through secure-score improvement, exposure and vulnerability visibility, risk prioritisation and remediation.
• Automate security controls across cloud accounts, subscriptions, workloads and platform services.
• Drive IAM governance, least privilege, RBAC, access reviews and secrets management using Azure Key Vault and AWS Secrets Manager.
• Implement policy- and compliance-as-code using Azure Policy, AWS SCPs, Terraform, Bicep or CloudFormation.
• Embed security scanning and compliance checks into CI/CD and provisioning pipelines.
• Support CDR across cloud control planes, identities, networks, containers, APIs, workloads and runtime signals.
• Integrate cloud alerts with SIEM, SOAR and XDR platforms to improve detection, investigation and response with Cyber Security and SOC teams.
• Define security standards for non-production, test, stage and production environments.
• Enable drift detection, continuous compliance, logging, monitoring and observability.
• Improve compliance dashboards, audit evidence, exception, risk and remediation tracking.
• Support secure landing zones, workload onboarding and reusable architecture patterns.
• Align security controls with FinOps, tagging, cost allocation and governance.
• Maintain security playbooks, standards, onboarding checklists and guidance.

Candidate requirements

• Bachelor’s degree in Computer Science, IT, Cyber Security, Cloud Computing, Engineering or a related field, or equivalent experience.
• Preferred certifications include CCSP, Azure Security Engineer Associate or AWS Certified Security – Specialty. Azure Solutions Architect, CKS and ITIL are advantageous.
• Hands‑on knowledge of AWS and Azure security, landing zones, CSPM/CNAPP, CDR, XDR, SIEM, SOAR and workload protection.
• Experience with Trend Vision One/Cloud One Conformity, Microsoft Defender for Cloud, Sentinel, Defender XDR or equivalent platforms.
• Strong knowledge of IAM, RBAC, privileged access, secrets management, DevSecOps, CI/CD security and infrastructure-as-code.
• Knowledge of CIS, ISO 27001, NIST, Microsoft Cloud Security Benchmark and cloud‑provider security practices.

Experience requirements

• 5–8 years’ experience in IT, cloud engineering, cyber security, infrastructure security or hosting operations.
• 3–5 years’ hands‑on AWS and/or Azure experience.
• 2–3 years’ experience in cloud security, compliance, governance, DevSecOps or security operations.
• Practical experience with CSPM/CNAPP, workload protection, security monitoring, audits, compliance and risk remediation in enterprise environments.

Behavioral capabilities

You can translate technical risks into practical actions, work independently across global teams, challenge decisions using a risk‑based approach, influence stakeholders, balance security with business needs, and drive improvement through collaboration and automation.

For thousands of people every day, we are more than just a dairy company. To our farmers, our employees, the communities we serve, the businesses we work with and the people to whom we bring happiness, FrieslandCampina means something more. For them, it is not just about what we do, but who we are.

We value talented people from any background who want to contribute to something bigger than themselves. We encourage all our employees to make decisions that benefit our entire company. At FrieslandCampina, we own our own career and act accordingly. We trust you to make a difference in your job and influence the bigger picture. Working at FrieslandCampina means you are contributing to a better world.

You will be part of the Cloud & Hosting Department, which is responsible for enabling secure, scalable, compliant and cost‑effective cloud and hosting services across FrieslandCampina. The department supports global cloud platforms, hosting services, governance, FinOps, DevOps enablement, landing zones, security controls, marketplace capabilities and cloud operating model maturity.

The Cloud & Hosting Department works closely with Enterprise Architecture, Cyber Security, IT clusters, business technology teams, suppliers and cloud providers to ensure our cloud and hosting platforms are reliable, secure, governed and ready for future business needs.

This position is based in Petaling Jaya, Malaysia, with a global scope and frequent collaboration with colleagues and stakeholders across different regions.

Why work with us:

An inspiring purpose

Better nutrition for the world and a good living for our farmers, now and for generations to come.

A cooperative culture

Driven by global collaboration, respect, and shared success

A tangible impact

Space to aim higher, with autonomy and a clear focus

Your growth fuels ours

We invest in your personal and professional development through training and education.

@ Royal FrieslandCampina