Kerja Sepenuh Masa, Senior IT Security Architect di Orsted Germany GmbH WP Kuala Lumpur - Maukerja

Join us in this role where you’ll play a crucial role in helping the business succeed through translating business, security, and regulatory requirements into secure architectures. You'll interact with every part of the organisation across multiple countries and cultures.

You'll be part of Security Architecture Authority in Corporate Information Security where you, together with your colleagues, will define compliant security requirements, practices, guidelines, and roadmaps, in cooperation with our other security and threat intelligence units. You’ll be collaborating directly with the business and our global IT and OT organisations, to set security direction and resolve their requirements and security concerns of regulators, partners, and clients. You’ll also help solve the unique challenges involved in building a sustainable energy company, with diverse operations around the globe. As a team, we involve building a sustainable green energy company, with diverse culture around the globe, whilst ensuring great cohesion and collaboration to achieve security by design.

• analysing, developing, and driving compliant strategic IT and application security risk mitigations, including building both short-term and long-term security roadmaps
• being the trusted advisor on IT and application security topics, using threat modeling and risk analysis to prioritize what brings the most value
• collaborating with key stakeholders on high-level security principles, policies, and guidelines, and communicating them throughout the organization
• leading security best practices, helping colleagues build secure end-to-end solutions and advocating for a security-by-design mindset
• advising key stakeholders on adopting and implementing security controls, posture hardening, and securing new innovative technologies and services across the globe.

• have 5 years of IT or OT architecture experience (3 years in security), a relevant degree, and preferably a certification like CISSP or similar
• have experience from operators of essential services or other regulated environments is preferred
• have comprehensive understanding of IT architecture, security practices, cloud technologies (AWS & Azure), OT environments, and modern Cloud Security technologies (e.g., CNAPP, CIEM)
• are an innovative and explorative self-driven approach to solving problems, and keeping updated with evolving technologies, such as guardrailing of AI
• can produce accurate and implementable policy documents, based on a good understanding of regulatory requirements and security frameworks such as ISO and NIST
• are able to convey complex security concepts and provide strategic advice to both technical and senior executive stakeholders, even in high-intensive scenarios.

Maybe you’ve read the above and can see you have some transferable skills, even though they don’t quite match all the points. If you think you can bring something to the team, we still encourage you to apply.