Regional Assistant Manager, Security Engineering

ZUS COFFEE; Selangor; On-site; MYR 180,000 - 300,000; Full time

Job summary

ZUS COFFEE is seeking a Regional Assistant Manager Security Engineering to lead and strengthen the organization's security engineering and infrastructure security across identity, cloud, and on-prem environments in Malaysia.

You will design, implement, and oversee security controls, drive Zero Trust, review cloud configurations, and collaborate with platform, infrastructure, and business teams to reduce cyber risk and support cybersecurity objectives.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS or related field.
• CISSP/CCSP/CISM/AWS Security Specialty preferred.
• 5–8 years of experience in cybersecurity, security engineering, cloud security, identity security, or related fields.
• Experience implementing identity security, cloud security, infrastructure security or security architecture initiatives.
• Experience with cloud platforms, enterprise identity solutions, and security technologies.

Responsibilities

• Lead identity security design and implementation (SSO, MFA, privileged access management, access governance).
• Drive Zero Trust initiatives and strengthen identity protection capabilities.
• Oversee cloud security controls, standards, and risk reviews.
• Provide security guidance and architecture recommendations for projects.
• Promote security-by-design principles across technology environments.
• Oversee security tooling, automation, and integration in retail/POS contexts.
• Monitor cybersecurity risk assessments, audits, and governance activities.

Skills

Identity security

Cloud security

Security architecture

Security governance

Zero Trust

Scripting (Python, Bash, PowerShell)

Encryption

SSO/MFA/PAPAM

Leadership

Regulatory compliance

Education

Bachelor's Degree in Cybersecurity/IT/CS

Certifications such as CISSP/CCSP/CISM/AWS Security Specialty

Tools

AWS

Azure

Google Cloud

Security technologies

Job description

As a Regional Assistant Manager Security Engineering, you will play a key role in leading andstrengthening the organization's security engineering and infrastructure security capabilities. You will be responsible for designing, implementing, and overseeing security controls acrossidentity, cloud, infrastructure, and enterprise technology environments. The role requires strong technical expertise, security architecture knowledge, and the ability to collaborate effectivelywith infrastructure, application, cloud, and business teams to reduce cyber risk, enhancesecurity resilience, and support the organization's overall cybersecurity objectives.

Identity Security & Access Governance:

• Lead the design and implementation of identity security controls, including SSO, MFAFA,privileged access management, and access governance.
• Drive Zero Trust security initiatives and strengthen identity protection capabilities.
• Oversee identity-related security risks and ensure appropriate security controls are in place.
• Lead the implementation and continuous improvement of cloud security controls and standards.
• Review cloud environments for security risks, misconfigurations, and compliance requirements.
• Partner with Platform & Infrastructure team to strengthen cloud security posture.

Security Architecture & Technical Advisory:

• Provide security guidance and architecture recommendations for technology projects and initiatives.
• Conduct security design reviews to ensure security requirements are incorporated into new solutions.
• Promote security-by-design principles across technology environments.

Security Tooling & Engineering:

• Oversee the deployment, configuration, and optimization of security technologies andplatforms.
• Drive security automation, integration, and operational efficiency initiatives.
• Evaluate and recommend new security technologies to enhance cybersecurity capabilities.
• Support the implementation of security controls within retail and POS environments.
• Collaborate with relevant stakeholders to address technology security risks affecting retail operations.
• Ensure appropriate protection of store and payment-related technology assets.

Governance, Risk & Continuous Improvement:

• Support cybersecurity risk assessments, audits, and compliance activities.
• Develop security standards, technical guidelines, and operational procedures.
• Monitor security metrics and drive continuous improvement initiatives across the security engineering function.

Qualifications & Experience

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
• Relevant professional certifications such as CISSP, CCSP, CISM, AWS Security Specialty, or equivalent are preferred.
• Minimum 5‒8 years of experience in cybersecurity, security engineering, cloud security, identity security, infrastructure security, or related fields.
• Experience implementing and managing identity security, cloud security, infrastructuresecurity, or security architecture initiatives.
• Experience working with cloud platforms, enterprise identity solutions, and security technologies.
• Experience leading cybersecurity projects and collaborating with cross-functional stakeholders.
• Extensive experience with cloud security frameworks and tools (AWS, Azure, Google Cloud).
• Strong knowledge of encryption, Identity Security, SSO, MFAFA, PAPAM, and Access Governance
• Familiarity with automation and scripting (Python, Bash, PowerShell) for security operations.
• Deep understanding of security frameworks (e.g., NIST, ISO 27001) and industry bestpractices.
• Strong grasp of networking, threat intelligence, and security architecture principles.
• Experience with regulatory compliance and governance in security environments
• Exceptional analytical skills for assessing complex security threats and devising effective solutions.
• Ability to lead security initiatives, drive continuous improvements, and influence securitydecisions across teams.
• Excellent verbal and written communication skills, with the ability to convey complexsecurity concepts to technical and non-technical audiences.
• Strong documentation and reporting abilities to support security governance andcompliance efforts.