IT Security Manager - Cloud, AppSec & Incident Response

Pixlr Sdn Bhd; Subang Jaya; On-site; MYR 180,000 - 300,000; Full time

Job summary

Pixlr Sdn Bhd in Malaysia is seeking a hands-on IT Security Manager to own product, cloud, and corporate security across the company. You will define and run our security program from policy to incident response, partnering with Engineering, IT, Product, Legal, and Operations.

The role covers governance, risk & compliance, application and product security, cloud controls in AWS, access hygiene, privacy, and security enablement.

Qualifications

• 6–10 years of experience in IT or application security, including ownership of security programmes or AppSec/CloudSec functions.
• Strong hands-on experience with application security, secure SDLC practices, and vulnerability management.
• Practical expertise in AWS security services, identity and access management, and cloud security monitoring.
• Experience with common security tooling, including SAST, DAST, dependency scanning, secret management, and security logging platforms.
• Solid understanding of security governance frameworks and regulatory principles, including ISO 27001, SOC 2, PDPA, and GDPR.
• Proven ability to lead incident response activities and communicate security risks clearly to technical and non-technical stakeholders.
• Nice-to-haves: Certifications: CISSP, CCSP, AWS Security Specialty, ISO 27001 Lead Implementer/Auditor.

Responsibilities

• Establish and maintain security policy stack aligned with ISO 27001 and SOC 2 controls.
• Conduct security risk assessments, vendor reviews, and data classification activities.
• Support audit readiness with evidence collection, control testing, and maintenance of mappings.
• Embed security in the SDLC with threat modelling, secure coding standards, and reviews.
• Operate application security tooling in CI/CD pipelines for SAST/DAST and dependency analysis.
• Guide engineering on secure design, OWASP Top 10, API security, and supply-chain risk.
• Implement cloud security controls across AWS including IAM, logging, monitoring, and threat detection.
• Define baseline hardening standards and policy-as-code controls for cloud and infra.
• Drive container, serverless, and data protection security practices.
• Develop and maintain incident response plans and coordinate with Engineering and IT.
• Operate centralised security logging, alerting, and detection capabilities.
• Maintain business continuity and disaster recovery security requirements.

Skills

Application security

Secure SDLC

Vulnerability management

AWS security

Identity & access management

Security monitoring

Incident response

Security governance

Tools

SAST

DAST

Dependency scanning

Secret management

Security logging platforms

Job description

Pixlr Sdn Bhd in Malaysia is seeking a hands-on IT Security Manager to own product, cloud, and corporate security across the company. You will define and run our security program from policy to incident response, partnering with Engineering, IT, Product, Legal, and Operations.

The role covers governance, risk & compliance, application and product security, cloud controls in AWS, access hygiene, privacy, and security enablement.