ROLE OVERVIEW
This role is responsible for supporting company's cybersecurity posture through the governance, monitoring, and continuous improvement of identity and access management, cloud security controls, and data protection capabilities. The role provides oversight of the cloud security posture and the identity security controls across enterprise platforms, including privileged access management and cloud environments.
KEY RESPONSIBILITIES:
1. Identity & Access Management
- Support implementation and governance of authentication and access control mechanisms, including password policies, risk-based authentication, MFA, and conditional access policies.
- Support implementation and governance of privileged access management controls for administrative, privileged, and service accounts.
- Support identity lifecycle management processes, including user and service accounts.
- Track and report identity-related risks, access control findings, and remediation activities.
- Monitor identity security posture and recommend improvements based on security best practices, threat intelligence, and regulatory requirements.
- Collaborate with operation teams to investigate identity-related security incidents, account compromise events, and authentication anomalies.
2. Data Protection Controls
- Support implementation of Data Loss Prevention (DLP) controls across CTOS envrionement.
- Assist in defining and maintaining data protection policies, sensitive data classifications, and information handling requirements.
- Collaborate with business and technology stakeholders to improve data protection controls while balancing operational requirements.
3. Cloud Security Posture
- Support the monitoring and assessment of cloud security posture across cloud environments, particularly AWS.
- Review cloud security configurations, identity permissions, security recommendations, and compliance findings to identify potential risks and improvement opportunities.
- Coordinate remediation activities with cloud operations, infrastructure, and application teams to address identified security gaps.
- Support cloud security reviews and governance activities to ensure cloud environments comply with cybersecurity standards and regulatory requirements.
- Monitor cloud security dashboards, posture management solutions, and security recommendations to improve overall cloud security hygiene.
4. Governance & Stakeholder Management
- Support the implementation, monitoring, and enforcement of cybersecurity policies, standards, procedures, and related control requirements across the organisation.
- Support the preparation of cybersecurity reports, dashboards, management updates, committee papers, and compliance reporting.
JOB REQUIREMENTS:
- Bachelor’s Degree in information security, computer science, technology, or related discipline.
- Professional certifications such as CISM, CRISC, CEH, OSCP, CompTIA, or equivalent.
- 3 – 7 years of experience in Information Security or Cybersecurity domains such as cloud security, identity and access management, or a related field.
- Familiarity with industry standards and regulatory frameworks such as CIS controls, BNM RMiT, CSA’s Cloud Control Matrix, ISO 27001 or similar standards.
- Strong understanding of Identity & Access Management (IAM), authentication technologies, and access governance principles.
- Understanding of privileged access management concepts, least-privilege principles, and privileged account governance.
- Working knowledge of cloud security principles, cloud identity security, and cloud security posture management concepts.
- Understanding of identity-related risks, access control weaknesses, cloud security findings, and recommend remediation measures.
- Strong stakeholder management and cross-functional coordination skills.
- Effective verbal and written communication skills, with the ability to engage both technical and non-technical audiences.
EMPLOYMENT DETAILS:
- Salary: Negotiable depending on experience and skillset
- Job Type: Permanent
- Location: Persiaran Barat, Seksyen 52 Petaling Jaya, 46200 Petaling Jaya, Selangor
- Working Hours: Monday to Friday, 40 hours per week
Pay: RM9,000.00 - RM15,000.00 per month
Benefits:
- Health insurance
- Opportunities for promotion
- Professional development
Work Location: In person