Senior IT Security Architect

Orsted Asia Pacific; Kuala Lumpur; On-site; MYR 120,000 - 160,000; Full time

Job summary

Orsted Asia Pacific is seeking a Security Architect within Corporate Information Security. You will translate business, security, and regulatory requirements into secure architectures and collaborate with global IT and OT teams to set security direction and address regulators, partners, and clients’ concerns.

You will help build compliant roadmaps, act as a trusted advisor on security topics, and contribute to defining policies and guidelines across the organization with a security-by-design

Qualifications

• 5 years IT/OT architecture experience (3 years in security) with a relevant degree.
• CISSP or equivalent certification preferred.
• Experience in operators of essential services or other regulated environments is preferred.
• Familiarity with ISO and NIST security frameworks.

Responsibilities

• Analyse, develop, and drive compliant IT and application security risk mitigations and roadmaps.
• Act as trusted advisor on IT and application security topics using threat modeling and risk analysis.
• Collaborate with stakeholders to communicate security principles, policies and guidelines across the organization.
• Lead security best practices and promote a security-by-design mindset in end-to-end solutions.
• Advise stakeholders on security controls, posture hardening, and secure adoption of new technologies.

Skills

IT architecture

Security architecture

Threat modeling

Risk analysis

Executive communication

Education

Bachelor's degree

Tools

AWS

Azure

CNAPP

CIEM

Job description

Join us in this role where you’ll play a crucial role in helping the business succeed through translating business, security, and regulatory requirements into secure architectures. You'll interact with every part of the organisation across multiple countries and cultures.

Welcome to Corporate Information Security

You’ll be part of Security Architecture Authority in Corporate Information Security where you, together with your colleagues, will define compliant security requirements, practices, guidelines, and roadmaps, in cooperation with our other security and threat intelligence units. You’ll be collaborating directly with the business and our global IT and OT organisations, to set security direction and resolve their requirements and security concerns of regulators, partners, and clients. You’ll also help solve the unique challenges involved in building a sustainable energy company, with diverse operations around the globe. As a team, we involved in building a sustainable green energy company, with diverse culture around the globe, whilst ensuring great cohesion and collaboration to achieve security by design.

You’ll play an important role in:

• analysing, developing, and driving compliant strategic IT and application security risk mitigations, including building both short-term and long-term security roadmaps
• being the trusted advisor on IT and application security topics, using threat modeling and risk analysis to prioritize what brings the most value
• collaborating with key stakeholders on high-level security principles, policies, and guidelines, and communicate them throughout the organization
• leading security best practices, helping colleagues build secure end-to-end solutions and advocating for a security-by-design mindset
• advising key stakeholders on adopting and implementing security controls, posture hardening, and securing new innovative technologies and services across the globe.

To succeed in the role, you:

• have 5 years of IT or OT architecture experience (3 years in security), a relevant degree, and preferably a certification like CISSP or similar
• have experience from operators of essential services or other regulated environments is preferred
• have comprehensive understand of IT architecture, security practices, cloud technologies (AWS & Azure), OT environments, and modern Cloud Security technologies (e.g., CNAPP, CIEM)
• are an innovative and explorative self-driven approach to solving problems, and keeping updated with evolving technologies, such as guardrailing of AI
• can produce accurate and implementable policy documents, based on a good understanding of regulatory requirements and security frameworks such as ISO and NIST
• are able to convey complex security concepts and provide strategic advice to both technical and senior executive stakeholders, even in high-intensive scenarios.

Maybe you’ve read the above and can see you have some transferable skills, even though they don’t quite match all the points. If you think you can bring something to the team,