Security Lead

Two95 International Inc.; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Two95 International Inc. is seeking an experienced Security Lead to drive end-to-end security governance for enterprise transformation programs involving SAP and non-SAP systems. You will define security strategies, manage access controls, and mitigate security risks across the organization.

Responsibilities include SoD analysis, risk assessments, control implementation, security reviews, and remediation. Coordinate testing, user provisioning, and cutover readiness, serving as escalation point

Qualifications

• Bachelor's degree in IT, CS, Cyber Security or related field.
• Experience in enterprise security governance and compliance management.
• Hands-on SAP security, access controls, and authorization concepts.
• Knowledge of SoD, risk analysis, and audit processes.
• Experience in large-scale transformation or ERP security projects.
• Strong stakeholder management and communication skills.

Responsibilities

• Define and manage the overall security strategy for the transformation program.
• Govern identity, access management, and authorization design across SAP and non-SAP applications.
• Ensure compliance with security standards, regulatory requirements, and audit controls.
• Conduct Segregation of Duties (SoD) analysis, risk assessments, and control implementation.
• Lead security reviews, approvals, and remediation activities.
• Coordinate security testing, user access provisioning, and cutover readiness activities.
• Act as the escalation point for security incidents, vulnerabilities, and risk management.
• Support post go-live security monitoring, stabilization, and compliance activities.

Skills

Security governance

SoD analysis

Risk assessments

Audit processes

Stakeholder management

Communication

Incident management

Education

Bachelor’s Degree in IT/CS/Cyber Security

Tools

SAP Security

Access controls

Authorization concepts

Job description

We are looking for an experienced Security Lead to drive end-to-end security governance and compliance for enterprise transformation programs involving SAP and non-SAP systems. The ideal candidate will be responsible for defining security strategies, managing access controls, ensuring compliance, and mitigating security risks across the organization.

• Define and manage the overall security strategy for the transformation program
• Govern identity, access management, and authorization design across SAP and non-SAP applications
• Ensure compliance with security standards, regulatory requirements, and audit controls
• Conduct Segregation of Duties (SoD) analysis, risk assessments, and control implementation
• Lead security reviews, approvals, and remediation activities
• Coordinate security testing, user access provisioning, and cutover readiness activities
• Act as the escalation point for security incidents, vulnerabilities, and risk management
• Support post go-live security monitoring, stabilization, and compliance activities

Requirements

• Bachelor’s Degree in Information Technology, Computer Science, Cyber Security, or related field
• Strong experience in enterprise security governance and compliance management
• Hands-on experience with SAP Security, access controls, and authorization concepts
• Good understanding of Segregation of Duties (SoD), risk analysis, and audit processes
• Experience managing security in large-scale transformation or ERP implementation projects
• Knowledge of regulatory and compliance standards related to IT security
• Strong stakeholder management, communication, and problem-solving skills
• Ability to manage security incidents, remediation planning, and governance activities
• Experience coordinating security testing and cutover activities is an added advantage