Senior IT Security Architect

Ørsted Group; Kuala Lumpur; On-site; MYR 367,000 - 572,000; Full time

Job summary

Ørsted Group is seeking a Security Architect within Corporate Information Security to translate business, security, and regulatory requirements into secure architectures. You’ll collaborate across global IT and OT teams, building roadmaps, policies, and guidelines while guiding security by design across diverse operations around the world.

With at least five years in IT/OT architecture and security experience, you’ll act as a trusted advisor on security topics, helping drive risk mitigations and

Qualifications

• Minimum 5 years IT or OT architecture experience (3 years in security)
• Relevant degree and security certifications preferred
• Experience in regulated environments and essential services is advantageous
• Knowledge of IT and OT architectures, cloud technologies, and modern cloud security tools
• Ability to translate regulatory requirements into secure architectures and policy documents

Responsibilities

• Analyze, develop, and drive compliant IT and application security roadmaps
• Advise on security controls, posture hardening, and implementing security by design
• Collaborate with stakeholders to communicate security principles and guidelines
• Lead security best practices and end-to-end secure solution development
• Convey complex security concepts to technical teams and senior executives

Skills

IT architecture

Security architecture

Threat modeling

Risk analysis

Security governance

Policy drafting

Stakeholder communication

Cloud security

Security-by-design

Regulatory compliance

Education

Bachelor's degree in a relevant field

CISSP or equivalent certification

Tools

CNAPP

CIEM

AWS

Azure

Job description

Join us in this role where you’ll play a crucial role in helping the business succeed through translating business, security, and regulatory requirements into secure architectures. You'll interact with every part of the organisation across multiple countries and cultures.

Welcome to Corporate Information Security

You’ll be part of Security Architecture Authority in Corporate Information Security where you, together with your colleagues, will define compliant security requirements, practices, guidelines, and roadmaps, in cooperation with our other security and threat intelligence units. You’ll be collaborating directly with the business and our global IT and OT organisations, to set security direction and resolve their requirements and security concerns of regulators, partners, and clients. You’ll also help solve the unique challenges involved in building a sustainable energy company, with diverse operations around the globe. As a team, we involved in building a sustainable green energy company, with diverse culture around the globe, whilst ensuring great cohesion and collaboration to achieve security by design.

You’ll play an important role in:

• analysing, developing, and driving compliant strategic IT and application security risk mitigations, including building both short-term and long-term security roadmaps
• being the trusted advisor on IT and application security topics, using threat modeling and risk analysis to prioritize what brings the most value
• collaborating with key stakeholders on high-level security principles, policies, and guidelines, and communicate them throughout the organization
• leading security best practices, helping colleagues build secure end-to-end solutions and advocating for a security-by-design mindset
• advising key stakeholders on adopting and implementing security controls, posture hardening, and securing new innovative technologies and services across the globe.

To succeed in the role, you:

• have 5 years of IT or OT architecture experience (3 years in security), a relevant degree, and preferably a certification like CISSP or similar
• have experience from operators of essential services or other regulated environments is preferred
• have comprehensive understand of IT architecture, security practices, cloud technologies (AWS & Azure), OT environments, and modern Cloud Security technologies (e.g., CNAPP, CIEM)
• are an innovative and explorative self-driven approach to solving problems, and keeping updated with evolving technologies, such as guardrailing of AI
• can produce accurate and implementable policy documents, based on a good understanding of regulatory requirements and security frameworks such as ISO and NIST
• are able to convey complex security concepts and provide strategic advice to both technical and senior executive stakeholders, even in high-intensive scenarios.

Maybe you’ve read the above and can see you have some transferable skills, even though they don’t quite match all the points. If you think you can bring something to the team,