ZUS COFFEE Hiring! Full Time Regional Assistant Manager, Security Engineering in Selangor - Ricebowl

Position Responsibilities

As a Regional Assistant Manager Security Engineering, you will play a key role in leading andstrengthening the organization's security engineering and infrastructure security capabilities. You will be responsible for designing, implementing, and overseeing security controls acrossidentity, cloud, infrastructure, and enterprise technology environments. The role requires strong technical expertise, security architecture knowledge, and the ability to collaborate effectivelywith infrastructure, application, cloud, and business teams to reduce cyber risk, enhancesecurity resilience, and support the organization's overall cybersecurity objectives.

Identity Security & Access Governance:

• Lead the design and implementation of identity security controls, including SSO, MFAFA,privileged access management, and access governance.
• Drive Zero Trust security initiatives and strengthen identity protection capabilities.
• Oversee identity-related security risks and ensure appropriate security controls are in place.

Cloud Security:

• Lead the implementation and continuous improvement of cloud security controls and standards.
• Review cloud environments for security risks, misconfigurations, and compliance requirements.
• Partner with Platform & Infrastructure team to strengthen cloud security posture.

Security Architecture & Technical Advisory:

• Provide security guidance and architecture recommendations for technology projects and initiatives.
• Conduct security design reviews to ensure security requirements are incorporated into new solutions.
• Promote security-by-design principles across technology environments.

Security Tooling & Engineering:

• Oversee the deployment, configuration, and optimization of security technologies andplatforms.
• Drive security automation, integration, and operational efficiency initiatives.
• Evaluate and recommend new security technologies to enhance cybersecurity capabilities.

Retail & POS Security:

• Support the implementation of security controls within retail and POS environments.
• Collaborate with relevant stakeholders to address technology security risks affecting retail operations.
• Ensure appropriate protection of store and payment-related technology assets.

Governance, Risk & Continuous Improvement:

• Support cybersecurity risk assessments, audits, and compliance activities.
• Develop security standards, technical guidelines, and operational procedures.
• Monitor security metrics and drive continuous improvement initiatives across the security engineering function.

Qualifications & Experience

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
• Relevant professional certifications such as CISSP, CCSP, CISM, AWS Security Specialty, or equivalent are preferred.
• Minimum 5‒8 years of experience in cybersecurity, security engineering, cloud security, identity security, infrastructure security, or related fields.
• Experience implementing and managing identity security, cloud security, infrastructuresecurity, or security architecture initiatives.
• Experience working with cloud platforms, enterprise identity solutions, and security technologies.
• Experience leading cybersecurity projects and collaborating with cross-functional stakeholders.
• Extensive experience with cloud security frameworks and tools (AWS, Azure, Google Cloud).
• Strong knowledge of encryption, Identity Security, SSO, MFAFA, PAPAM, and Access Governance
• Familiarity with automation and scripting (Python, Bash, PowerShell) for security operations.
• Deep understanding of security frameworks (e.g., NIST, ISO 27001) and industry bestpractices.
• Strong grasp of networking, threat intelligence, and security architecture principles.
• Experience with regulatory compliance and governance in security environments
• Exceptional analytical skills for assessing complex security threats and devising effective solutions.
• Ability to lead security initiatives, drive continuous improvements, and influence securitydecisions across teams.
• Excellent verbal and written communication skills, with the ability to convey complexsecurity concepts to technical and non-technical audiences.
• Strong documentation and reporting abilities to support security governance andcompliance efforts.

a Necessity, not a Luxury