Cloud Security, Risk & Compliance Specialist

FrieslandCampina; Selangor; On-site; MYR 90,000 - 190,000; Full time

Job summary

FrieslandCampina is seeking a Cloud Security, Risk & Compliance Specialist to strengthen cloud security posture across AWS and Azure. You will translate security and compliance requirements into guardrails, reusable patterns and automated controls within the Cloud & Hosting Department.

Key focus areas include CSPM, CDR/XDR integration, and IAM governance, enabling secure onboarding, risk remediation and continuous improvement across global cloud environments.

Qualifications

• Bachelor’s degree or equivalent in a relevant field.
• Hands-on knowledge of AWS and Azure security, CSPM, CDR/XDR, SIEM, SOAR.
• Experience with CSPM/CNAPP, workload protection and compliance in enterprise contexts.

Responsibilities

• Define security standards and guardrails for AWS, Azure, and Cloud Edge Services.
• Automate security controls across cloud accounts and workloads.
• Drive IAM governance, least privilege, RBAC, and secrets management.
• Implement policy- and compliance-as-code using Azure Policy, AWS SCPs, Terraform, or CloudFormation.
• Embed security checks into CI/CD pipelines and provisioning processes.
• Support CDR across cloud control planes, identities, networks and workloads.

Skills

AWS

Azure

CSPM

IAM governance

CI/CD security

Education

Bachelor's degree in Computer Science, IT, Cyber Security, Cloud Computing, Engineering

Tools

Terraform

CloudFormation

Bicep

Azure Policy

Azure Key Vault / AWS Secrets Manager

Job description

Jora Malaysia will close on 16th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Cloud Security, Risk & Compliance Specialist

Can you strengthen cloud security posture, detection and compliance across a global multi-cloud landscape?

Join FrieslandCampina as Cloud Security & Compliance Specialist in the Cloud & Hosting Department. You will help secure AWS and Azure platforms through cloud governance, CSPM, CDR/XDR integration, IAM guardrails, policy-as-code, audit readiness and continuous compliance.

We are looking for a Cloud Security, Risk & Compliance Specialist to join the Cloud & Hosting Department and strengthen secure, compliant and scalable cloud adoption across FrieslandCampina. You will work across AWS and Azure, translating security and compliance requirements into guardrails, reusable patterns and automated controls.

A key focus is Cloud Security Posture Management (CSPM), providing visibility into misconfigurations, vulnerabilities, exposures and compliance gaps. You will also support Cloud Detection and Response (CDR) and Extended Detection and Response (XDR) by integrating cloud security signals with SIEM, SOAR and XDR platforms. Working with Cloud & Hosting, Cloud Architects, Cyber Security, SOC, DevOps, service owners and suppliers, you will support cloud onboarding, risk remediation and continuous improvement.

Key responsibilities

• Define security standards, baseline controls and compliance guardrails across AWS, Azure and Cloud Edge Services.
• Strengthen CSPM through secure-score improvement, exposure and vulnerability visibility, risk prioritisation and remediation.
• Automate security controls across cloud accounts, subscriptions, workloads and platform services.
• Drive IAM governance, least privilege, RBAC, access reviews and secrets management using Azure Key Vault and AWS Secrets Manager.
• Implement policy- and compliance-as-code using Azure Policy, AWS SCPs, Terraform, Bicep or CloudFormation.
• Embed security scanning and compliance checks into CI/CD and provisioning pipelines.
• Support CDR across cloud control planes, identities, networks, containers, APIs, workloads and runtime signals.
• Integrate cloud alerts with SIEM, SOAR and XDR platforms to improve detection, investigation and response with Cyber Security and SOC teams.
• Define security standards for non-production, test, stage and production environments.
• Enable drift detection, continuous compliance, logging, monitoring and observability.
• Improve compliance dashboards, audit evidence, exception, risk and remediation tracking.
• Support secure landing zones, workload onboarding and reusable architecture patterns.
• Align security controls with FinOps, tagging, cost allocation and governance.
• Maintain security playbooks, standards, onboarding checklists and guidance.

Candidate requirements

• Bachelor's degree in Computer Science, IT, Cyber Security, Cloud Computing, Engineering or a related field, or equivalent experience.
• Preferred certifications include CCSP, Azure Security Engineer Associate or AWS Certified Security - Specialty. Azure Solutions Architect, CKS and ITIL are advantageous.
• Hands-on knowledge of AWS and Azure security, landing zones, CSPM/CNAPP, CDR, XDR, SIEM, SOAR and workload protection.
• Experience with Trend Vision One/Cloud One Conformity, Microsoft Defender for Cloud, Sentinel, Defender XDR or equivalent platforms.
• Strong knowledge of IAM, RBAC, privileged access, secrets management, DevSecOps, CI/CD security and infrastructure-as-code.
• Knowledge of CIS, ISO 27001, NIST, Microsoft Cloud Security Benchmark and cloud-provider security practices.

Experience requirements

• 5-8 years' experience in IT, cloud engineering, cyber security, infrastructure security or hosting operations.
• 3-5 years' hands-on AWS and/or Azure experience.
• 2-3 years' experience in cloud security, compliance, governance, DevSecOps or security operations.
• Practical experience with CSPM/CNAPP, workload protection, security monitoring, audits, compliance and risk remediation in enterprise environments.

You can translate technical risks into practical actions, work independently across global teams, challenge decisions using a risk-based approach, influence stakeholders, balance security with business needs, and drive improvement through collaboration and automation.