Principal – Workspace Security Architecture and Engineering

Dyson GmbH; Kuala Lumpur; On-site; MYR 360,000 - 520,000; Full time

Job summary

Dyson is seeking a Principal Workplace Security Architect in Malaysia’s Kuala Lumpur office to define and drive the end-to-end workplace security strategy, architecture, and governance across end-user computing, collaboration, identity, and communications platforms globally.

You will lead Zero Trust adoption, act as the technical design authority, and collaborate with platform engineering to ensure secure-by-design deployments while advancing risk reduction and security maturity.

Qualifications

• 7–10 years of cybersecurity experience with focus on enterprise architecture
• Proven ability to define workplace security strategies and lead global transformations
• Desirable certifications such as CISSP, ISSAP, SABSA, or SC-100

Responsibilities

• Define and drive end-to-end workplace security strategy and governance
• Lead Zero Trust adoption across end-user technologies
• Act as Technical Design Authority for security controls and patterns
• Own security roadmap, investments, and alignment with risk tolerances
• Partner with platform teams to embed secure-by-design principles

Skills

End-user security

Zero Trust

Security architecture

Governance

Stakeholder management

Leadership

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Microsoft Entra ID

Defender Suite

Microsoft 365

Exchange Online

Microsoft Teams

Conditional Access

Intune

JAMF

Job description

Principal – Workspace Security Architecture and Engineering

Summary

Salary : Competitive Job Family : Cyber Security Location : Malaysia - Kuala Lumpur Office

Role Purpose
As the Principal Workplace Security Architect, you are accountable for defining and driving the end-to-end workplace security strategy, architecture, technology roadmap, and governance across end-user computing, collaboration, identity, and communications platforms globally.

Operating as a strategic Individual Contributor and Technical Design Authority, you will lead the adoption of Zero Trust principles across workforce technologies. By establishing robust security standards and reference architectures, you will proactively reduce cyber risk, guide platform engineering execution, and ensure that workplace capabilities are secure-by-design.

In this role, you will lead and manage the following domains:

• Workplace Security Strategy & Governance: Defining enterprise-wide workplace security policies, architectural standards, and governance frameworks.
• Zero Trust & Target Architecture: Designing reference architectures and driving Zero Trust adoption across all end-user technologies.
• Technical Design Authority: Serving as the final technical authority for workplace security controls, architectural patterns, and design reviews.
• Security Roadmap & Investment: Owning long‑term security roadmaps, technology selections, and risk‑reduction investment plans.
• Cross‑Functional Security Alignment: Partnering with platform engineering teams to embed secure‑by‑design principles throughout IT delivery.

Key Skills & Qualifications
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline (or equivalent practical experience).

- A minimum of 7–10 years' experience in cybersecurity, with a strong emphasis on enterprise security architecture, end‑user security, and Zero Trust frameworks.

- Demonstrated experience establishing enterprise workplace security strategies and leading complex security transformations across global organizations.

- Industry certifications such as CISSP, ISSAP, SABSA, or Microsoft Cybersecurity Architect (SC‑100) are highly desirable.

Security Expertise & Architecture
Deep understanding of end‑to‑end workplace security architecture, Zero Trust maturity models, and modern secure design principles across identities, endpoints, and cloud collaboration suites.

Tooling & Technical Proficiency
Deep architectural proficiency in Microsoft Entra ID, Defender Suite, Microsoft 365, Exchange Online, Microsoft Teams, Conditional Access, Intune, and JAMF.

Risk Management & Prioritisation
Ability to quantify cyber risk within end‑user computing and translate technical security posture into clear business context for senior executives.

Governance, Process & Control Design Proven experience defining security standards, reference patterns, and control requirements aligned to enterprise risk tolerances and regulatory frameworks.

Service Delivery & Operational Management Ability to guide security engineering priorities, oversee architectural review lifecycles, and maintain consistency across complex operational environments.

Data Analysis, Reporting & Insight Skill in analyzing security telemetry and enterprise architecture coverage metrics to demonstrate systemic risk reduction and security debt clearance.

Stakeholder Management & Influence Exceptional ability to influence and challenge senior stakeholders, engineering leads, and business partners to align technology choices with security architectures.

Threat Intelligence Integration Ability to apply threat intelligence and modern adversary tactics to workplace architecture designs, neutralizing emerging attack pathways.

Leadership & Strategic Direction Proven capability to provide technical leadership, mentor senior engineers, set architectural direction, and foster a culture of security engineering excellence.

Continuous Improvement & Automation A continuous improvement mindset with a focus on embedding security‑as‑code and automated compliance guardrails into workplace deployment pipelines.

Success Measures

Workplace Security Strategy & Governance

• Accountability: Define, maintain, and enforce workplace security strategies, target architectures, reference patterns, and security governance standards.
• Success Measures: 100% alignment of workplace technology designs with enterprise Zero Trust architecture patterns; High compliance and zero major architectural non‑conformances during audit reviews.

Technical Design Authority & Architecture Review

• Accountability: Serve as the final technical authority for workplace security choices, conducting design reviews for all workspace engineering projects.
• Success Measures: 100% of major workplace technology changes reviewed and approved through the technical design authority process; Zero high‑risk unmitigated architectural flaws introduced into production workspace environments.

Secure‑by‑Design & Platform Alignment

• Accountability: Partner directly with modern workplace platform engineering teams to integrate secure‑by‑design baseline standards into build pipelines.
• Success Measures: Measurable structural reduction in workplace vulnerability and misconfiguration surface area; High satisfaction and strong operational alignment scores from partner platform engineering teams.

Security Roadmap & Investment Management

• Accountability: Maintain and execute the workplace security roadmap, aligning security technology investments to overall risk reduction targets.
• Success Measures: Delivery of key security roadmap milestones on schedule and within budget; Quantifiable reduction in global workplace cyber risk posture.

Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity.