Senior Enterprise Security Architect — Cloud & Data

TIME dotCom Berhad; Shah Alam; Presencial; MYR 240.000 - 420.000; Jornada completa

Descripción de la vacante

TIME dotCom Berhad is seeking an senior security architect to lead the design of security architectures across applications, infrastructure, cloud, and data. You will act as technical lead on secure-by-design initiatives and ensure implementation quality while aligning with NIST CSF 2.0 and Malaysian regulations (NACSA, MCMC, Cyber Security Act 2024).

The role requires collaboration with SOC and GRC, development of reference designs for controls such as CNAPP, PAM, DLP, SIEM, zero trust, and

Formación

• 12+ years in security engineering/architecture and complex systems design.
• Experience translating regulatory requirements into technical guardrails.
• Threat modeling, zero trust, identity and access management concepts.
• Ability to lead cross-functional security design reviews and drive remediation.

Responsabilidades

• Lead design of security architectures and standards across apps, infra, cloud and data.
• Define enterprise security patterns and reference designs for core controls (SIEM, DLP, PAM, CNAPP).
• Partner with SOC and GRC to embed controls and align with NIST CSF 2.0 and local regulations.
• Review designs, perform risk assessments, and guide IaC guardrails and workload hardening.

Conocimientos

Security architecture

Leadership

Stakeholder management

Communication

Strategic thinking

Continuous learning

Educación

CISSP

CISM

ISO 27001

TOGAF

Herramientas

Entra ID

Azure

AWS

CNAPP

KMS

Zscaler

Descripción del empleo

TIME dotCom Berhad is seeking an senior security architect to lead the design of security architectures across applications, infrastructure, cloud, and data. You will act as technical lead on secure-by-design initiatives and ensure implementation quality while aligning with NIST CSF 2.0 and Malaysian regulations (NACSA, MCMC, Cyber Security Act 2024).

The role requires collaboration with SOC and GRC, development of reference designs for controls such as CNAPP, PAM, DLP, SIEM, zero trust, and