Job Description

Key Responsibilities:

• Provide security advisory and oversight for AWS cloud architectures, ensuring alignment with security-by-design and defense‑in‑depth principles.

• Define, implement, and enforce AWS cloud security standards, guardrails, and best practices across accounts, regions, and workloads.

• Conduct security architecture reviews for AWS‑based applications and infrastructure, including VPC design, IAM models, data protection, and network segmentation.

• Review and track remediation of cloud security findings.

• Ensure AWS environments comply with applicable regulatory and industry requirements (e.g. MAS TRM, NIST).

• Responsible for ensuring IT systems and applications within our organization meet the needs of the business while adhering to security best-practices, compliance and regulatory requirements.

• Collaborate with teams within and outside of Information Security to assess, monitor, and reduce security risk within the organisation.

• Manage project risks and issues, including risk identification, assessment, monitoring, remediation, and ensure escalation in project governance

• Experience in leading and implementing multiple security solutions and technologies across one or more IT Security domains (Cyber Program Management, Threat Intelligence, Identity & Access Management, Data Protection, Privacy). This experience should include responding to compliance and advisories from regulatory bodies.

• Ensure cybersecurity programs are structured and well-planned and budgeted

• Oversee CAPEX & OPEX budget for security services and projects and manage all reporting to Committees

• Work with IT Security Leads to manage changes in IT Security Roadmap and manage the change management for IT Security programs

• Manage IT Security incidents, mitigation planning, damage assessment and corrective measures.

• Review vulnerability assessment & penetration testing to assess the residual risks & mitigation plans.

• Responsible for ensuring identified cyber security issues are addressed in a timely manner.

• Raise cybersecurity knowledge and awareness within the organisation

Key Requirements:

• Minimally Bachelor's degree in computer science or equivalent

• Security industry certifications such as CISSP, CISA, CREST, CEH, SANS, GSEC, AWS Certified Security etc are preferred.

• Minimum 6-10 years’ experience working in a highly-regulated IT Security/CII environment; Including 5 years of threat intelligence, incident response and VAPT experience

Technical / Functional skills

• Good knowledge and hands-on experience in native-cloud services on Cloud Security

• Good understanding of TCP/IP protocol and OSI Seven Layer Model.

• Strong knowledge of security best practices and concepts.

• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.

• Expert understanding of firewall technologies.

• Advance knowledge & Hands-on experience in supporting and maintaining enterprise IT Security solutions and technologies such as Firewall, IDS/IPS and Proxy, etc

• Advance knowledge of Windows and/or Unix-based systems / architectures and related security.

• Advance knowledge of cryptography / cryptographic systems

• Advance level of knowledge of LAN / WAN technologies

• Knowledge of VPN technologies.

• Be able to articulate threats and risk to business and technology leaders.

Personal skills (Soft Competencies [Core/Leadership])

• Ability to plan, organize and prioritize tasks to complete within established time frames.

• Highly result oriented and can work independently.

• Ability to build relationships and interact effectively with internal and external parties.

• Strong analytical, technical, and communication (both oral and written) skills.

• Strong interest in the field of information security.

• Creative, independent with good problem solving skills.

• Ability to work effectively as a team

With operations that span 15 different markets across the region, the opportunity to expand your experience, test your capabilities, and exhibit your resilience is ample. #teamCIMB is always keen to welcome the ones who are ready to make that very special difference – for themselves and the bank.