Senior IT Security Architect

Orsted; Kuala Lumpur; On-site; MYR 120,000 - 190,000; Full time

Job summary

Orsted in Kuala Lumpur, Malaysia, seeks a Security Architect to translate business and regulatory needs into secure architectures. You will define compliant security requirements and roadmaps, collaborating with global IT and OT teams to align with regulators and clients.

You’ll lead threat modeling, risk analysis, and policy development, advocating for security-by-design while communicating complex topics to both technical and executive stakeholders.

Qualifications

• 5 years of IT or OT architecture experience (3 years in security) and a relevant degree.
• Preferably CISSP or similar certification.
• Experience in regulated environments and essential services is a plus.
• Understanding of cloud technologies and modern cloud security tools.

Responsibilities

• Translate business, security and regulatory requirements into secure architectures.
• Define compliant security requirements, practices, and roadmaps.
• Collaborate with stakeholders across the organization and globally.
• Advise on security controls, posture hardening, and security-by-design initiatives.
• Communicate complex security concepts to technical and executive audiences.

Skills

IT/OT architecture

Security architecture

Threat modeling

Risk analysis

Policy documents

Regulatory frameworks ISO/NIST

Cloud security (AWS)

Cloud security (Azure)

OT environments

Security by design

Stakeholder communication

Education

Relevant degree

CISSP or similar

Tools

AWS

Azure

Job description

Join us in this role where you’ll play a crucial role in helping the business succeed through translating business, security, and regulatory requirements into secure architectures. You'll interact with every part of the organisation across multiple countries and cultures.

Welcome to Corporate Information Security

You’ll be part of Security Architecture Authority in Corporate Information Security where you, together with your colleagues, will define compliant security requirements, practices, guidelines, and roadmaps, in cooperation with our other security and threat intelligence units. You’ll be collaborating directly with the business and our global IT and OT organisations, to set security direction and resolve their requirements and security concerns of regulators, partners, and clients. You’ll also help solve the unique challenges involved in building a sustainable energy company, with diverse operations around the globe. As a team, we involved in building a sustainable green energy company, with diverse culture around the globe, whilst ensuring great cohesion and collaboration to achieve security by design.

You’ll play an important role in:

• analysing, developing, and driving compliant strategic IT and application security risk mitigations, including building both short-term and long-term security roadmaps
• being the trusted advisor on IT and application security topics, using threat modeling and risk analysis to prioritize what brings the most value
• collaborating with key stakeholders on high-level security principles, policies, and guidelines, and communicate them throughout the organization
• leading security best practices, helping colleagues build secure end-to-end solutions and advocating for a security-by-design mindset
• advising key stakeholders on adopting and implementing security controls, posture hardening, and securing new innovative technologies and services across the globe.

To succeed in the role, you:

• have 5 years of IT or OT architecture experience (3 years in security), a relevant degree, and preferably a certification like CISSP or similar
• have experience from operators of essential services or other regulated environments is preferred
• have comprehensive understand of IT architecture, security practices, cloud technologies (AWS & Azure), OT environments, and modern Cloud Security technologies (e.g., CNAPP, CIEM)
• are an innovative and explorative self-driven approach to solving problems, and keeping updated with evolving technologies, such as guardrailing of AI
• can produce accurate and implementable policy documents, based on a good understanding of regulatory requirements and security frameworks such as ISO and NIST
• are able to convey complex security concepts and provide strategic advice to both technical and senior executive stakeholders, even in high-intensive scenarios.

Maybe you’ve read the above and can see you have some transferable skills, even though they don’t quite match all the points. If you think you can bring something to the team,