Cloud Technical Security Governance

GoKardz Technologies; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

GoKardz Technologies in Malaysia seeks a Cloud Security & Governance Specialist to create, review, and update Group IT cloud security policies, standards, and guidelines, aligned with regional units and regulatory requirements.

You will perform comprehensive cloud security assessments, validate architectures, and provide advisory on controls, enforcement, and governance across the Group. You will lead assessments of cloud projects, review SOC 2 reports, and drive improvements with stakeholders.

Qualifications

• Bachelor’s degree in CS/IT or related field.
• Minimum 2 years in cloud security or similar role; 3+ years IT security required.
• Proven experience conducting cloud security assessments.

Responsibilities

• Create, review and update cloud security policies, standards, procedures and guidelines.
• Perform comprehensive cloud security assessments for new and existing cloud projects.
• Develop regional IT security governance processes and provide consultancy across the Group.

Skills

Cloud security

Security governance

Regulatory compliance

Stakeholder liaison

Education

Bachelor’s degree in Computer Science / Information Technology

Tools

AWS

Azure

Google Cloud

SIEM

IAM

Encryption

Job description

1. Create, review and update the Group IT Security Policies, Standards, Procedures, Guidelines, checklist and assessment requirements related to Cloud Security
   • Will be used by Regional & Overseas Units
   • Comply to all local regulators’ requirements and industry best practise are captured and adhere to.
   • Ensure that cloud security policies and assessment questions are aligned with industry best practices (e.g. ISO 27001, NIST, CSA STAR, SOC 2) and regulatory requirements (e.g.BNM RMiT, MAS, OJK, HKMA)
   • Regularly review and update cloud security policies to address emerging threats and changes in the regulatory landscape.

1. Perform comprehensive cloud security assessments for new and existing cloud projects, encompassing both private and public cloud solutions.
   • Review evidence provided by solution provider and third parties such as SOC 2 reports, CSA STAR certifications, attestation reports, and penetration testing results.
   • Conduct technical validation of cloud architecture and configurations to ensure compliance with security policies and standards.

1. Develop Regional IT Security Governance processes to align with the Bank’s strategy and aspirations
2. Liaise and manage business projects and infrastructure upgrades penetration testing and code reviews
3. Enforcement and proactively provides IT security consultancy/ advisory services on policies, standards and best practices across the Group

Qualifications

• Education and Experience:
  • Bachelor’s degree in Computer Science, Information Technology, or a related field.
  • Minimum of 2 years of experience in cloud security, cloud governance, or a similar role. A total of at least 3 years of experience in IT security, or infrastructure is required.
  • Proven experience in conducting cloud security assessments and technical validations.
• Technical Skills:
  • Strong understanding of cloud platforms (AWS, Azure, Google Cloud) and their security features.
  • Knowledge of cloud security frameworks and standards (ISO 27001, NIST, CSA STAR, SOC 2).
  • Experience with security tools and technologies used in cloud environments (e.g., SIEM, IAM, encryption).