Security Architect

Neuron Solutions Sdn. Bhd.; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Neuron Solutions Sdn. Bhd. is seeking a System Security Architect to design and govern secure IT, OT, and cloud architectures across the Group. You will partner with security leaders to define roadmaps, policies, and risk-based improvements, while advancing threat modelling and security controls.

You will bring deep knowledge of security frameworks, zero trust, and cloud security, and work on cross-subsidiary governance, reporting, and secure engineering practices.

Qualifications

• Proficient in threat modelling techniques (e.g., MITRE ATT&CK, PASTA, STRIDE, Attack Trees).
• Knowledge of EA frameworks (TOGAF, DODAF, Zachman/SABSA, Gartner EA, ArchiMate).
• Familiar with standards and control frameworks (NIST 800-53 Rev.5, CIS Top 18, ISO27001/2, PCI-DSS, OWASP Top Ten).
• Hands-on with hybrid and cloud architecture design and implementation.
• Strong understanding of zero trust, network security, cloud security, cryptography, secure SDLC.
• Experience with NIST CSF and CIS Controls assessment and implementation.

Responsibilities

• Directly support the Lead System Security Architect and Security Compliance Lead.
• Develop, review and implement security architectures and frameworks for IT systems, networks & applications, and OT environments.
• Define and enforce security policies, procedures, and best practices.
• Prepare and evaluate security requirements proposed for projects or tender submissions.
• Define and employ governance and risk management procedures and methodologies.
• Define security roadmaps based on business and enterprise priorities.
• Develop security surveillance strategies, frameworks, and procedures.
• Develop security assessment surveys and maturity measurement methods.
• Identify vulnerabilities and perform security risk assessments.
• Evaluate and recommend security tools and technologies.
• Coordinate and communicate GRC activities across the Group’s subsidiaries.
• Define and manage data gathering and reporting across the Group’s subsidiaries.
• Develop and maintain system security architecture and design standards / templates.
• Maintain records of system architectural patterns and secure engineering solutions.
• Work with the Cyber Security Architect to ensure all aspects of Cyber Security Operational capability are developing appropriately and to communicate threat intel across subsidiaries as required.

Skills

Threat modelling

EA frameworks

Security standards

Hybrid/cloud arch

Zero trust

NIST CSF

Job description

Directly support the Lead System Security Architect and Security Compliance Lead.

Develop, review and implement security architectures and frameworks for IT systems, networks & applications, and OT environments.

Define and enforce security policies, procedures, and best practices.

Prepare and/or evaluate security requirements proposed for project or tender submissions.

Define and employ governance and risk management procedures and methodologies.

Define security roadmaps based on business and enterprise priorities.

Develop security surveillance strategies, frameworks, and procedures.

Develop security assessment surveys and maturity measurement methods.

Identify vulnerabilities and perform security risk assessments.

Evaluate and recommend security tools and technologies.

Coordinate and communicate GRC activities across the Group’s subsidiaries.

Define and manage data gathering and reporting across the Group’s subsidiaries.

Develop and maintain system security architecture and design standards / templates.

Maintain records of system architectural patterns and secure engineering solutions.

Work with the Cyber Security Architect to ensure all aspects of Cyber Security Operational capability are developing appropriately and to communicate threat intel across subsidiaries as required.

Requirements:

Knowledge of Threat Modelling techniques such as Mitre ATT&CK, PASTA, STRIDE and Attack Trees.

Knowledge of Enterprise Architecture Frameworks such as TOGAF, DODAF, Zachman / SABSA, Gartner EA, Archimate.

Knowledge of Standards and Control Frameworks such as NIST 800-53 Rev.5, CIS Top 18, ISO27001/2, PCI-DSS & OWASP Top Ten.

Detailed experience with hybrid and cloud architecture / system design and implementation.

In-depth knowledge of zero trust principles, network security, cloud security, cryptography, and secure software development.

Practical experience in NIST CSF and CIS Controls assessment and implementation.

Demonstrable experience delivering detailed system security design and threat modelling.

Excellent written and verbal communication skills.

At least 2 years work experience as a System Security Architect.