Key Responsibilities:
Provide security advisory and oversight for AWS cloud architectures, ensuring alignment with security-by-design and defense‑in‑depth principles.
Define, implement, and enforce AWS cloud security standards, guardrails, and best practices across accounts, regions, and workloads.
Conduct security architecture reviews for AWS‑based applications and infrastructure, including VPC design, IAM models, data protection, and network segmentation.
Review and track remediation of cloud security findings.
Ensure AWS environments comply with applicable regulatory and industry requirements (e.g. MAS TRM, NIST).
Responsible for ensuring IT systems and applications within our organization meet the needs of the business while adhering to security best-practices, compliance and regulatory requirements.
- Collaborate with teams within and outside of Information Security to assess, monitor, and reduce security risk within the organisation.
- Manage project risks and issues, including risk identification, assessment, monitoring, remediation, and ensure escalation in project governance
Experience in leading and implementing multiple security solutions and technologies across one or more IT Security domains (Cyber Program Management, Threat Intelligence, Identity & Access Management, Data Protection, Privacy). This experience should include responding to compliance and advisories from regulatory bodies.
Ensure cybersecurity programs are structured and well-planned and budgeted
Oversee CAPEX & OPEX budget for security services and projects and manage all reporting to Committees
Work with IT Security Leads to manage changes in IT Security Roadmap and manage the change management for IT Security programs
Manage IT Security incidents, mitigation planning, damage assessment and corrective measures.
Review vulnerability assessment & penetration testing to assess the residual risks & mitigation plans.
Responsible for ensuring identified cyber security issues are addressed in a timely manner.
Raise cybersecurity knowledge and awareness within the organisation
Requirements:
- A Bachelor's degree in computer science or equivalent is a minimum.
- Minimum 10 years’ experience working in a highly-regulated IT Security/CII environment; Including 5 years of threat intelligence, incident response and VAPT experience
Good knowledge and hands-on experience in native-cloud services on Cloud Security
Good understanding of TCP/IP protocol and OSI Seven Layer Model.
Strong knowledge of security best practices and concepts.
Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
Expert understanding of firewall technologies.
Advance knowledge & Hands-on experience in supporting and maintaining enterprise IT Security solutions and technologies such as Firewall, IDS/IPS and Proxy, etc
Advance knowledge of Windows and/or Unix-based systems / architectures and related security.
Advance knowledge of cryptography / cryptographic systems
Advance level of knowledge of LAN / WAN technologies
Knowledge of VPN technologies.
Be able to articulate threats and risk to business and technology leaders.
- Ability to plan, organize and prioritize tasks to complete within established time frames.
- Highly result oriented and can work independently.
- Ability to build relationships and interact effectively with internal and external parties.
- Strong analytical, technical, and communication (both oral and written) skills.
- Strong interest in the field of information security.
- Creative, independent with good problem solving skills.
- Ability to work effectively as a team
#LI-DNI
About UsWith operations that span 15 different markets across the region, the opportunity to expand your experience, test your capabilities, and exhibit your resilience is ample. #teamCIMB is always keen to welcome the ones who are ready to make that very special difference – for themselves and the bank.
