Senior Cloud Security Engineer

Bank Islam Malaysia Berhad; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Bank Islam Malaysia Berhad is seeking a Senior Cloud Security Engineer to safeguard cloud environments, applications and data. You will lead security controls, monitoring and risk management while partnering with Cloud Platform, DevOps and governance teams to embed security across the cloud lifecycle.

You will drive improvements in cloud-security practices, coordinate remediation of incidents, and ensure compliance with internal standards and regulatory obligations.

Qualifications

• Bachelor's degree in IT / Computer Science or related cybersecurity field.
• 7–10 years in IT or Computer Science or cybersecurity, with at least 3 years securing cloud environments, preferably AWS.
• Hands-on experience securing AWS cloud environments: identity, network, workload, data, API, encryption and secrets-management controls.
• Knowledge of AWS security services, centralized logging, threat detection, vulnerability management and incident response.
• Other cloud providers (Azure, GCP, Alibaba) considered.
• Working knowledge of Terraform, AWS CloudFormation, CI/CD security, JSON or YAML, and security automation.
• Understanding of cloud-security frameworks, regulatory requirements and shared responsibility model.
• Ability to assess security risks, investigate cloud-security events and drive remediation to closure.
• Strong analytical, problem-solving, prioritization and stakeholder communication skills.
• Experience in banking or regulated industries is a plus.
• Knowledge of Kubernetes, CNAPP, SIEM, DLP and API security is an advantage.
• Certifications such as AWS Specialty, CISSP, CCSP, CISM or Terraform Associate are pluses.

Responsibilities

• Act as the Subject Matter Expert for the Cloud Security pillar and provide technical guidance for cloud initiatives.
• Define, implement and maintain cloud-security standards, controls and secure configurations.
• Conduct security architecture reviews and risk assessments for cloud services, applications and workloads.
• Secure cloud identities, networks, workloads, data, APIs, encryption keys and secrets.
• Embed security into IaC, CI/CD pipelines and cloud deployment processes.
• Monitor and investigate cloud-security alerts, vulnerabilities, misconfigurations and suspicious activities.
• Take ownership of cloud-security findings and coordinate remediation through closure.
• Drive continuous improvement in cloud-security controls, automation, monitoring and operational processes.
• Support cloud-security incidents, security testing, audits and regulatory assessments.
• Collaborate with Cloud Platform, DevOps, applications, architecture, SOC, risk and governance teams to secure the cloud lifecycle.
• Ensure cloud services comply with security standards, risk requirements and regulatory obligations.
• Maintain cloud-security documentation, runbooks, compliance evidence and stakeholder reporting.

Skills

Cloud security

Security risk assessment

Incident response

Stakeholder communication

Ownership & teamwork

Analytical thinking

Education

Bachelor's Degree in IT / Computer Science or related cybersecurity field

Tools

Terraform

AWS CloudFormation

CI/CD security

JSON

YAML

Kubernetes

Job description

We are part of Bank Islam's technology & transformation organization, responsible for enabling secure, innovative and customer-focused banking experiences. Our multidisciplinary team works across cloud, cybersecurity, engineering, data and digital platforms to deliver resilient and trusted services that support the Bank's digital ambitions.

We place customers at the centre of our work, embrace new technologies and continuously improve how banking services are designed, secured and delivered. We are committed to creating positive and sustainable impact for the economy, community and environment while fulfilling the objectives of Shariah.

Our work is guided by four core values: thinking customers first, acting with integrity, advancing beyond expectations and taking full ownership of our mandate.

Primary Functions:

The Senior Cloud Security Engineer is responsible for protecting the Bank's cloud environments, applications and data through effective security controls, monitoring and risk management.

The role acts as the Subject Matter Expert for the Cloud Security pillar, providing technical guidance and working with Cloud Platform, DevOps, application, architecture, SOC, risk and governance teams to embed security throughout the cloud lifecycle. The role also drives continuous improvement initiatives, investigates cloud-security risks and events, coordinates remediation to closure, and ensures compliance with the Bank's security standards and applicable regulatory requirements.

Duties and Responsibilities

Act as the Subject Matter Expert for the Cloud Security pillar and provide technical guidance for cloud initiatives.

Define, implement and maintain cloud-security standards, controls and secure configuration requirements.

Conduct security architecture reviews and risk assessments for cloud services, applications and workloads.

Secure cloud identities, networks, workloads, data, APIs, encryption keys and secrets.

Embed security into Infrastructure as Code, CI/CD pipelines and cloud deployment processes.

Monitor and investigate cloud-security alerts, vulnerabilities, misconfigurations and suspicious activities.

Take ownership of cloud-security findings and coordinate remediation, tracking and validation through closure.

Drive continuous improvement in cloud-security controls, automation, monitoring and operational processes.

Support cloud-security incidents, security testing, audits and regulatory assessments.

Work with Cloud Platform, DevOps, application, architecture, SOC, risk and governance teams to embed security throughout the cloud lifecycle.

Ensure cloud services comply with the Bank's security standards, risk requirements and applicable regulatory obligations.

Maintain cloud-security documentation, operational runbooks, compliance evidence and stakeholder reporting.

Requirements:

Bachelor's Degree in Information Technology / Computer Sciene or any related cybersecurity field.

7 - 10 years of experience in IT or Computer Science or cybersecurity, with at least 3 years of hands-on experience securing cloud environments, preferably AWS.

Strong hands-on experience securing AWS cloud environments, including identity, network, workload, data, API, encryption and secrets-management controls.

Practical knowledge of AWS security services, centralized logging, threat detection, vulnerability management and incident response.

Other Cloud Service Provider i.e Azure, GCP, Alibaba shall be considered.

Working knowledge of Terraform, AWS CloudFormation, CI/CD security, JSON or YAML, and security automation.

Understanding of cloud-security frameworks, regulatory requirements and the cloud shared responsibility model.

Ability to assess security risks, investigate cloud-security events and drive remediation to validated closure.

Strong analytical, problem-solving, prioritization and stakeholder communication skills.

Demonstrated ownership, integrity, teamwork and ability to work independently.

Experience in banking, financial services or another regulated industry is an advantage.

Knowledge of Kubernetes, CNAPP, SIEM, DLP and API security is an advantage.

Relevant certifications such as AWS Certification Specialty, CISSP, CCSP, CISM or Terraform Associate are added advantage

Bank Islam Malaysia Berhad is the pioneer of Islamic banking system in Malaysia. We have grown to become one of the nation's leading financial institutions, providing a wide range of products and services to meet the financial and banking needs of all Malaysians, regardless of race and religion. A career with Bank Islam means an outstanding opportunity to develop a professional vocation in the ever-challenging banking industry. Be a part of an organisation that is totally committed to developing Malaysia as one of the leading global Islamic financial centres.