IT Security Lead

talentweb3; Kuala Lumpur; Hybrid; MYR 180,000 - 360,000; Full time

Job summary

talentweb3 in Kuala Lumpur is seeking an IT Security Lead to oversee security across cloud infrastructure, internal systems, and digital asset operations. This hands-on role works closely with Engineering and reports to the CRO/CISO on risk, governance, and security oversight.

You will design, implement, and manage security controls, coordinate with vendors, and drive DR/BCP efforts, with 5–8 years in IT security and crypto experience preferred.

Qualifications

• 5–8 years in IT security or security engineering.
• 2–3 years specifically within crypto or Web3 environments.
• Experience in regulated settings (MAS, FCA, etc.) is preferred.

Responsibilities

• Own and maintain security controls across AWS (IAM, access, logging, network security).
• Identify and remediate threats, vulnerabilities, misconfigurations, and access risks across systems.
• Maintain and actively manage the Technology Risk Management (TRM) register, including risk identification, tracking, and remediation.
• Act as the security gatekeeper, performing security reviews of new features, smart contract integrations, and system architectures prior to launch.
• Manage security vendors (MSSP, monitoring tools, Web3 security providers) and ensure coverage.
• Lead incident response, investigate alerts, and coordinate containment and recovery.
• Design and maintain wallet and transaction security controls for minting/redeemption processes.
• Lead third-party risk reviews and technical due diligence for integrations and providers.

Education

Bachelor's degree in Computer Science or related field

Tools

AWS security tooling

Job description

Location

Kuala Lumpur, Malaysia (Hybrid, Full Time)

About the Company

A leading real-world asset (RWA) tokenization platform, renowned for its unmatched focus on regulatory standards and advanced financial technology. Founded in 2022, the company bridges traditional and decentralized finance by providing, through its regulated entities in two offshore jurisdictions, secure, transparent, and compliant on-chain access to tokenized RWA. The firm is tokenizing global finance with a core focus on compliance and innovation.

About the Role

We are seeking an IT Security Lead to oversee and enhance security across cloud infrastructure, internal systems, and digital asset operations, aligned with regulatory standards for TRM and Cyber Security. This is a hands-on individual contributor role, focused on the design, implementation, and ongoing management of security controls. The successful candidate will work closely with Engineering to ensure secure system design and operations, and partner with the CRO and CISO on risk, governance, and security oversight.

What We Offer

• A chance to directly contribute to the success and growth of one of the most reputable and regulated RWA tokenization platforms in the space, with a proven commercial track record


• Supportive culture that values clear communication and high-quality execution


• Competitive compensation


• Eligibility to participate in the Employee Stock Option Scheme and token incentive allocation


• Flexible work arrangements

Responsibilities

• Own and maintain security controls across AWS (IAM, access, logging, network security)


• Identify and remediate threats, vulnerabilities, misconfigurations, and access risks across systems


• Maintain and actively manage the Technology Risk Management (TRM) register, including risk identification, tracking, and remediation


• Act as the security gatekeeper, performing security reviews of all new features, smart contract integrations, and system architectures prior to launch


• Act as the primary owner of security vendors (MSSP, monitoring tools, Web3 security providers), ensuring effective coverage and response capability


• Monitor system health, investigate security alerts, and lead incident response, including coordination with internal teams and external providers for containment, recovery, and escalation


• Design and maintain institutional-grade wallet and transaction security controls, ensuring the integrity of minting and redemption processes


• Lead third-party and vendor risk reviews, including technical due diligence for integrations, web3 protocols, and service providers


• Support the testing and continuous improvement of disaster recovery and resilience processes


• Maintain and enhance recovery procedures for critical systems

We Are Looking For Someone Who

• 5–8 years in IT security, security engineering, or DevSecOps, with at least 2–3 years specifically within crypto or a web3-native environment


• Experience working within a regulated environment (e.g. MAS, BMA, FCA, SEC) preferred


• Strong hands-on experience in cloud security (AWS preferred: IAM, logging, networking)


• Strong understanding of blockchain security fundamentals (Ethereum/EVM, smart contract vulnerabilities, and oracle risks)


• Hands-on builder, can design and implement independently


• Experience working with or managing external security vendors


• Experience in startups / fast-moving environments

Preferred Qualifications

• Familiarity with custody providers (e.g. Fireblocks)


• Experience supporting audits (ISO / SOC2)