Lead the design of security architectures and standards across applications, infrastructure, cloud, and data. Act as technical lead in projects to ensure secure-by-design outcomes and oversee implementation quality. Partner closely with SOC and GRC to embed architecture controls, reduce systemic risk, and ensure alignment with NIST CSF 2.0 and Malaysian regulatory standards (NACSA, MCMC, Cyber Security Act 2024).

• Enterprise Architecture & Strategy
  • Define enterprise security architecture patterns (network, identity, application, cloud, data).
  • Develop reference designs for core controls: SIEM/SOAR, CNAPP, DLP/CASB, PAM, zero trust, endpoint security, API security.
  • Maintain security standards and design baselines mapped to NIST CSF 2.0 and internal policies.
• Project Engagement
  • Translate business and regulatory requirements (PDPA, NACSA/MCMC) into technical guardrails.
  • Review solutio...