IT SECURITY & GOVERNANCE ANALYST (CLOUD SECURITY)

Qaaf Resources Sdn. Bhd; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

Qaaf Resources Sdn. Bhd is seeking a cloud security leader to drive policy development and enforce standards across the organization. You will guide teams on provider selection, architect security controls, and collaborate with sourcing for vendor management.

The role requires several years of cloud security experience, strong communication, and a methodical approach to governance and cost management. Candidates with CISSP or equivalent certs are preferred.

Qualifications

• Minimum 3 years of cloud security architecting experience.
• Experience writing cloud security policies, guidelines, and reference architectures for at least 2 years.
• Degree in Computer Science or Engineering required.
• Professional security certifications are advantageous.

Responsibilities

• Lead development and enforcement of organization-wide cloud security policies.
• Lead standards, guidelines, and reference architectures for cloud security.
• Guide internal users in selecting cloud service providers using security standards.
• Assist in cloud security solution architecting with IT integrations.
• Manage cloud security cost governance, visibility, and forecasts.
• Collaborate with sourcing for vendor management and contracts.
• Identify centralized cloud governance tools to enforce policies.

Skills

English & Bahasa Melayu

Interpersonal skills

Communication

Problem-solving

Structured & methodical

Team player

Finance basics

Education

Degree in Computer Science or Engineering

Certified AWS Security Specialty

Certified Azure Security Engineer

Certified Ethical Hacker

CISSP

Job description

This role will provide dedicated support and assistance to the Program Leading the following aspects:

• Lead the development and enforcement of organization-wide cloud computing security policies with cross-functional teams to minimize the organizational risk of going to the cloud.
• Lead the development and enforcement of organization-wide cloud computing security standards, guidelines and reference architectures with cross-functional teams to minimize the organizational risk of going to the cloud.
• Guide internal users in selecting the right cloud service providers with the use of established security standards, guidelines and reference architectures.
• Assist internal users in doing cloud security solution architecting especially when involving integration with internal IT systems.
• Do costs governance by getting visibility and insights into cloud security expenditure of the whole TNB, forecast future cost and propose contracts consolidation for better discounts.
• Participate in all cloud community activities as cloud security subject matter experts to increase the awareness of cloud security best practices including cloud collaboration across TNB.
• Collaborate with the sourcing team for contract negotiation and vendor management.
• Identify and select centralised cloud governance tools as means to enforce cloud policies and guidelines and provide organization-wide visibility and governance such as Cloud Service Expense Management and Cloud Security Tools. The works include business case development for the implementation team to implement.

Personal Skill Requirements

• Positive attitude towards work.
• Basic understanding of finance, profit & loss, budgeting.
• Fluent in English and Bahasa Melayu (for Malaysian candidates)
• Good interpersonal skills for dealing with all relevant stakeholders.
• Good communication skills with the ability to present technical details to a non-technical audience.
• The ability to work with a structured and methodical approach, combined with an enquiring mind.
• An aptitude for problem-solving, with the ability to take a logical route to the source of an error.
• A basic understanding of business processes.Capable of analysing a process.
• An enquiring mind, good at problem-solving.
• Team player attitude

Educations Qualifications

• Degree in Computer Science or Engineering

Professional Certification Advantage

• Certified AWS Security Specialty
• Certified Azure Security Engineer
• Certified Ethical Hacker
• Certified Information Systems Security Professionals (CISSP)

Experience Required

• Experience in cloud security architecting, implementing and maintaining security controls for at least three(3) years.
• Experience in writing cloud security policies, guidelines, standards, reference architecture for at least two (2) years.