Security Lead

Beyondsoft Malaysia; Kampung Malaysia Tambahan; On-site; MYR 1,800,000 - 2,600,000; Full time

Job summary

Beyondsoft Malaysia is seeking a Lead Security Architect to steer security architecture, risk assessments, and regulatory controls across enterprise applications. You will perform threat modelling, VA/PT, and security audits, and work with BMISS / BNM RMiT controls, OWASP, secure SDLC, and cloud security (AWS).

Certifications such as CISSP/CISM/CISA/ISO 27001 are advantageous; banking or regulated financial experience is preferred.

Qualifications

• Lead security architecture and risk assessments for enterprise apps.
• Perform threat modelling, vulnerability assessments, VA/PT, and security audits.
• Work with BMISS / BNM RMiT controls, governance, audit evidence, and compliance assessments.
• Apply OWASP, secure SDLC, vulnerability management, and security testing.
• Provide AWS security expertise including IAM, SIEM, PAM, encryption and access management.
• Certifications such as CISSP, CISM, CISA, ISO 27001, or AWS Security are advantageous; banking/regulatory experience preferred.

Responsibilities

• Lead security architecture, risk assessments, and controls for enterprise applications.
• Conduct threat modelling, VA/PT, and audits to ensure compliance.
• Implement BMISS / BNM RMiT security controls and governance artifacts.
• Adhere to OWASP guidelines, secure SDLC, and vulnerability management practices.
• Oversee AWS security, IAM, SIEM, PAM, encryption, and access management programs.

Skills

Security architecture

Threat modelling

Vulnerability assessment

Penetration testing

Security audits

Security governance

Regulatory compliance

OWASP

Secure software development

Vulnerability management

Security testing

AWS Security

IAM

SIEM

PAM

Encryption

Access management

Education

CISSP

CISM

CISA

ISO 27001

AWS Security Certification

Tools

AWS Security

IAM

SIEM

PAM

Encryption

Access management

Job description

Leadsecurity architecture, risk assessment, security controls, and regulatory compliance for enterprise applications.

Experience in security architecture, threat modelling, vulnerability assessment, penetration testing (VA/PT), and security audits.

Hands-on experience with BMISS / BNM RMiT security controls, including security governance, audit evidence, and compliance assessments.

Knowledge of OWASP, secure software development, vulnerability management, and security testing.

Technical expertise in AWS Security, IAM, SIEM, PAM, encryption, and access management.

Relevant certifications such as CISSP, CISM, CISA, ISO 27001, or AWS Security are advantageous. Prior experience delivering security solutions for banking, capital markets, or regulated financial institutions is strongly preferred.