Senior IT Security Lead, Cloud & Web3 Compliance

talentweb3; Kuala Lumpur; Hybrid; MYR 180,000 - 360,000; Full time

Job summary

talentweb3 in Kuala Lumpur is seeking an IT Security Lead to oversee security across cloud infrastructure, internal systems, and digital asset operations. This hands-on role works closely with Engineering and reports to the CRO/CISO on risk, governance, and security oversight.

You will design, implement, and manage security controls, coordinate with vendors, and drive DR/BCP efforts, with 5–8 years in IT security and crypto experience preferred.

Qualifications

• 5–8 years in IT security or security engineering.
• 2–3 years specifically within crypto or Web3 environments.
• Experience in regulated settings (MAS, FCA, etc.) is preferred.

Responsibilities

• Own and maintain security controls across AWS (IAM, access, logging, network security).
• Identify and remediate threats, vulnerabilities, misconfigurations, and access risks across systems.
• Maintain and actively manage the Technology Risk Management (TRM) register, including risk identification, tracking, and remediation.
• Act as the security gatekeeper, performing security reviews of new features, smart contract integrations, and system architectures prior to launch.
• Manage security vendors (MSSP, monitoring tools, Web3 security providers) and ensure coverage.
• Lead incident response, investigate alerts, and coordinate containment and recovery.
• Design and maintain wallet and transaction security controls for minting/redeemption processes.
• Lead third-party risk reviews and technical due diligence for integrations and providers.

Education

Bachelor's degree in Computer Science or related field

Tools

AWS security tooling

Job description

talentweb3 in Kuala Lumpur is seeking an IT Security Lead to oversee security across cloud infrastructure, internal systems, and digital asset operations. This hands-on role works closely with Engineering and reports to the CRO/CISO on risk, governance, and security oversight.

You will design, implement, and manage security controls, coordinate with vendors, and drive DR/BCP efforts, with 5–8 years in IT security and crypto experience preferred.