Specialist, Cloud Security Architect

Malaysian Communications and Multimedia Commission; Cyberjaya; On-site; MYR 180,000 - 300,000; Full time

Job summary

Malaysian Communications and Multimedia Commission seeks a senior security architect to lead development and governance of cloud security architecture and engineering standards. The role ensures secure-by-design implementations, scalable security patterns, and consistent application of security controls across NSAIC platforms.

Responsibilities include defining secure engineering standards, leading zero trust blueprint, and providing assurance for cloud platforms and AI workloads.

Qualifications

• Degree in Cybersecurity, Computer Science, Engineering or related field.
• CISSP, CCSP, TOGAF or SABSA certifications preferred.
• 10–12 years in cloud security architecture or enterprise security.
• Experience in designing cloud-native and hybrid security architectures.
• Experience in implementing zero trust and DevSecOps framework.
• Experience in leading architecture governance and design reviews.

Responsibilities

• Lead development of cloud security reference architectures – ensuring standardised and reusable secure design patterns.
• Establish security architecture governance framework – ensuring consistent design approval and enforcement.
• Define secure-by-design engineering standards – ensuring integration into DevSecOps and platform engineering.
• Lead zero trust architecture implementation blueprint – ensuring identity-centric security across environments.
• Provide architecture assurance for cloud platforms and AI workloads – ensuring compliance with approved security standards.
• Oversee integration of security controls in infrastructure design – ensuring protection across compute, storage, and network layers.
• Lead technical evaluation of cloud security technologies – ensuring best-fit solutions aligned with sovereign requirements.
• Guide technical teams on secure architecture adoption – ensuring alignment across divisions

Skills

Cloud security

Zero Trust

DevSecOps

Platform security

Threat modelling

Governance

Stakeholder alignment

Education

Cybersecurity degree

CISSP

CCSP

TOGAF

SABSA

Job description

Lead the development and governance of cloud security architecture and engineering standards – ensuring secure-by-design implementation, scalable security patterns, and consistent application of security controls across NSAIC platforms.

Job Responsibilities:

1. Lead development of cloud security reference architectures – ensuring standardised and reusable secure design patterns.

2. Establish security architecture governance framework – ensuring consistent design approval and enforcement.

3. Define secure-by-design engineering standards – ensuring integration into DevSecOps and platform engineering.

4. Lead zero trust architecture implementation blueprint – ensuring identity-centric security across environments.

5. Provide architecture assurance for cloud platforms and AI workloads – ensuring compliance with approved security standards.

6. Oversee integration of security controls in infrastructure design – ensuring protection across compute, storage, and network layers.

7. Lead technical evaluation of cloud security technologies – ensuring best-fit solutions aligned with sovereign requirements.

8. Guide technical teams on secure architecture adoption – ensuring alignment across divisions

Qualification & Work Experience

1. Degree in Cybersecurity, Computer Science, Engineering or related field from a recognized University

2. Professional certifications such as CISSP, CCSP, TOGAF, SABSA are preferred.

3. 10–12 years in cloud security architecture or enterprise security.

4. Experience in designing cloud-native and hybrid security architectures.

5. Experience in implementing zero trust and DevSecOps framework.

6. Experience in leading architecture governance and design reviews.

Technical & Leadership Competencies/Skills

• Cloud security architecture (multi-cloud, hybrid)
• Zero Trust Architecture
• DevSecOps and secure engineering
• Container, Kubernetes, and platform security
• Threat modelling and architecture risk assessment
• Architecture leadership and governance capability
• Ability to translate policy into technical implementation
• Stakeholder alignment across engineering teams
• Structured thinking and technical clarity
• Strong collaboration with multi-disciplinary teams
• High ownership and accountability

Candidate must be willing to work in Cyberjaya and Malaysian Citizen.