Principal Security Architect

TIME dotCom Berhad; Shah Alam; On-site; MYR 240,000 - 420,000; Full time

Job summary

TIME dotCom Berhad is seeking an senior security architect to lead the design of security architectures across applications, infrastructure, cloud, and data. You will act as technical lead on secure-by-design initiatives and ensure implementation quality while aligning with NIST CSF 2.0 and Malaysian regulations (NACSA, MCMC, Cyber Security Act 2024).

The role requires collaboration with SOC and GRC, development of reference designs for controls such as CNAPP, PAM, DLP, SIEM, zero trust, and

Qualifications

• 12+ years in security engineering/architecture and complex systems design.
• Experience translating regulatory requirements into technical guardrails.
• Threat modeling, zero trust, identity and access management concepts.
• Ability to lead cross-functional security design reviews and drive remediation.

Responsibilities

• Lead design of security architectures and standards across apps, infra, cloud and data.
• Define enterprise security patterns and reference designs for core controls (SIEM, DLP, PAM, CNAPP).
• Partner with SOC and GRC to embed controls and align with NIST CSF 2.0 and local regulations.
• Review designs, perform risk assessments, and guide IaC guardrails and workload hardening.

Skills

Security architecture

Leadership

Stakeholder management

Communication

Strategic thinking

Continuous learning

Education

CISSP

CISM

ISO 27001

TOGAF

Tools

Entra ID

Azure

AWS

CNAPP

KMS

Zscaler

Job description

The position reports to the Head of Cybersecurity.

Position Overview:

Lead the design of security architectures and standards across applications, infrastructure, cloud, and data. Act as technical lead in projects to ensure secure-by-design outcomes and oversee implementation quality. Partner closely with SOC and GRC to embed architecture controls, reduce systemic risk, and ensure alignment with NIST CSF 2.0 and Malaysian regulatory standards (NACSA, MCMC, Cyber Security Act 2024).

Enterprise Architecture & Strategy

• Define enterprise security architecturepatterns (network, identity, application, cloud, data).
• Develop referencedesigns for core controls: SIEM/SOAR, CNAPP, DLP/CASB, PAM, zero trust, endpoint security, API security.
• Maintainsecurity standards and design baselinesmapped to NIST CSF 2.0 and internal policies.

Project Engagement

• Translate business and regulatory requirements (PDPA, NACSA/MCMC) into technical guardrails.
• Review solution designs and conduct technical risk assessments.
• Provide hands-on guidance during build-e.g., IaC guardraifs, identity design, secret management, workload hardening.
• Chair/participate in Security Design Reviews and drive remediation plans.
• Create and maintain Design Decision Records and reusable patterns.
• Sign off on security non-functionals for new solutions to ensure consistency and compliance.

Technology Lifecycle Management

• Lead the 12-36 month security capability roadmap, including evaluating emerging technologies and running PoCs to validate solutions.
• Set configuration baselines, tagging standards, and onboarding patterns for new apps/services.

Cross-Functional Collaboration

• Work with SOC for use case design, log onboarding and detection coverage.
• Work with GRC for control testing and exception management.
• Strategic Thinking & Problem Solving: Demonstrated ability to align security architecture with long-term business goals while providing practical solutions to complex technical challenges.
• Stakeholder Management & Communication: Excellent interpersonal skills with the ability to communicate technical security concepts to both technical and non-technical audiences, including senior leadership.
• Technical Leadership & Influence: Proven track record of leading cross-functional teams and driving consensus on security standards and design decisions without direct formal authority.
• Continuous Learning & Agility: A proactive mindset regarding the evolving threat landscape, with a commitment to staying current on emerging security technologies, frameworks, and regulatory requirements.
• Attention to Detail & Analytical Rigor: A methodical approach to conducting risk assessments and reviewing solution designs to ensure no security gaps are overlooked.

Your Merits

• Experience: 12+ years in security engineering/architecture; fed security design for complex systems, mufti-cloud or cloud migrations.
• Methodologies: Threat Modeling, STRIDE, attack trees, reference architecture, Zero Trust Architecture, MITRE ATT&CK and D3FEND.
• Certifications: CISSP or CISM with ISO 27001 and TOGAF
• Specialized: CCSP, Azure Security Architect (AZ-305/SC-100),AWS Security Speciality, CSSLP, SABSA, Google Professional Cloud Security Engineer, CCNP, Zscaler, GIAC GDSA/GCSA

Technical Depth:

• Identity & Access: Entra ID, MFA/SSO, Conditional Access, PAM.
• Cloud security (Azure/AWS): Micro-segmentation, Landing Zones, CNAPP, KMS, secrets, workload identity.
• Data protection: DLP/CASB, classification, encryption-at-rest/in-transit, key management.
• Infra: Endpoint hardening, EDR, vulnerability management, patch orchestration.

*Only shortlisted candidates will be identified.