Lead IT Security Architect

Ørsted; Kuala Lumpur; On-site; MYR 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a dedicated security professional to enhance their IT and application security. In this pivotal role, you will collaborate across various teams to develop strategic security roadmaps and ensure compliance with regulatory requirements. Your expertise in IT architecture and cloud technologies will be essential in advising stakeholders on best practices and innovative security solutions. Join a forward-thinking company committed to building a sustainable future while fostering a culture of security by design. If you have a passion for problem-solving and a proactive approach to security, this opportunity is perfect for you.

Qualifications

• 5+ years of IT or OT architecture experience, with 3 years in security.
• Proficient in writing clear and concise documentation based on regulatory frameworks.

Responsibilities

• Analyze and drive strategic IT and application security risk mitigations.
• Serve as a trusted advisor on IT and application security topics.

Skills

IT architecture knowledge

Security practices

Cloud technologies (AWS & Azure)

Problem-solving skills

Communication skills

Education

Relevant degree

CISSP certification or similar

Tools

Cloud Security technologies (CNAPP, CIEM)

Job description

Join us in this role where you’ll play a crucial role in helping the business succeed through translating business, security, and regulatory requirements into secure architectures. You'll interact with every part of the organisation across multiple countries and cultures.

Welcome to Corporate Information Security
You’ll be part of our IT & Application Security CoE (Center of Excellence) where you, together with your colleagues, will define compliant security requirements, practices, guidelines, and roadmaps, in cooperation with our other security and threat intelligence units. You’ll be collaborating directly with the business and our global IT and OT organisations, to set security direction and resolve their requirements and security concerns of regulators, partners, and clients. You’ll also help solve the unique challenges involved in building a sustainable energy company, with diverse operations around the globe. As a team, we are involved in building a sustainable green energy company, with diverse culture around the globe, whilst ensuring great cohesion and collaboration to achieve security by design.

You’ll play an important role in:

1. analysing, developing, and driving compliant, strategic IT and application security risk mitigations, including building both short-term and long-term security roadmaps
2. serving as the trusted advisor on IT and application security topics, using threat modelling and risk analysis to prioritize what brings the most value
3. collaborating with key stakeholders on high-level security principles, policies, and guidelines, and communicate them throughout the organization
4. leading security best practices, helping colleagues build secure end-to-end solutions and advocating for a security-by-design mindset
5. advising key stakeholders on adopting and implementing security controls, posture hardening, and securing new innovative technologies and services across the globe.

To succeed in the role, you:

1. have extensive security knowledge: Comprehensive understanding of IT architecture, security practices, cloud technologies (AWS & Azure), OT environments, and modern Cloud Security technologies (e.g., CNAPP, CIEM)
2. possess excellent problem-solving and learning skills: An innovative and explorative self-driven approach to solving problems, and keeping updated with evolving technologies
3. are proficient in writing clear and concise documentation: Producing accurate and implementable policy documents, based on a good understanding of regulatory requirements and security frameworks such as ISO and NIST
4. have strong communication skills: Ability to convey complex security concepts and provide strategic advice to both technical and senior executive stakeholders, in high-intensive scenarios
5. have relevant experience and qualifications: 5 years of IT or OT architecture experience (3 years in security), a relevant degree, and preferably a certification like CISSP or similar. Experience from operators of essential services and regulated environments is preferred.

Maybe you’ve read the above and can see you have some transferable skills, even though they don’t quite match all the points. If you think you can bring something to the team, we still encourage you to apply.

Shape the future with us
Send your application to us as soon as possible. We’ll be conducting interviews on a continuous basis and reserve the right to take down the advert when we’ve found the right candidate.