Petaling Jaya, Malaysia
Published on: November 10, 2026
Location: Singapore
Employment Type: Permanent
Our client is a well-established enterprise undergoing significant cloud transformation initiatives and is seeking an experienced Cloud Security Manager to strengthen its cloud security capabilities.
This leadership role will be responsible for shaping cloud security strategy, driving governance and risk management practices, and ensuring secure adoption of cloud technologies across the organization. The successful candidate will partner closely with infrastructure, engineering, DevOps, technology risk, and cybersecurity stakeholders to build and maintain a robust cloud security program.
Develop and execute the organization's cloud security roadmap and operating model.
Define security standards, policies, and controls to support secure cloud adoption.
Champion security-by-design principles across cloud projects and initiatives.
Provide subject matter expertise to technology and business stakeholders on cloud security best practices. [CSM JD | PDF]
Review and provide security oversight for cloud solution designs and implementations.
Advise project teams on architecture risks, secure configuration standards, and cloud-native security controls.
Drive implementation of security guardrails, automation, and preventive controls within cloud environments.
Support DevSecOps initiatives and integration of security requirements into development pipelines.
Establish and maintain cloud identity management frameworks.
Ensure appropriate access controls, privileged account management, and least-privilege principles are enforced.
Lead periodic entitlement reviews and strengthen authentication and authorization controls. [CSM JD | PDF]
Oversee continuous monitoring of cloud infrastructure and applications.
Direct the identification and remediation of security vulnerabilities, configuration weaknesses, and threats.
Lead investigations and response efforts related to cloud security incidents.
Drive improvements in detection, response, and recovery capabilities.
Ensure cloud environments comply with internal policies, regulatory requirements, and industry standards.
Conduct security assessments, threat modelling exercises, and risk reviews.
Coordinate penetration testing activities and remediation tracking.
Support internal and external audits, including evidence collection and reporting.
Collaborate with infrastructure, application, network, and security teams to strengthen cloud security posture.
Manage relationships with external partners and security technology vendors.
Provide guidance, mentoring, and awareness programs to promote a strong security culture across the organization.
Degree in Computer Science, Information Security, Engineering, or a related discipline.
Approximately 5-10 years of experience in cybersecurity, including several years focused on cloud security and cloud architecture.
Strong hands-on knowledge of AWS security services, including identity management, security monitoring, logging, encryption, threat detection, and web application protection technologies.
Experience implementing cloud security controls in modern cloud-native environments.
Familiarity with Infrastructure as Code technologies such as Terraform or CloudFormation.
Proven track record in cloud governance, access control frameworks, data protection, network security, and security operations.
Strong understanding of security frameworks and regulatory requirements such as ISO 27001, NIST, CIS Controls, SOC reporting standards, and financial-sector technology risk guidelines.
Ability to work effectively with both technical and business stakeholders.
Professional certifications such as CISSP, CISM, CCSP, AWS Security Specialty, or AWS Solutions Architect will be highly regarded.
We are interested in speaking with security professionals who have experience operating in complex enterprise environments and who possess a strong blend of strategic leadership, cloud security expertise, and hands-on technical capability. Candidates with experience driving cloud security transformation programmes and engaging senior stakeholders will be particularly well suited for this opportunity.
EA License: 21S0698
EA Personnel Number: R1112793
As part of our hiring process, this role may use Keystone AI’s artificial intelligence or automated tools to assist with reviewing and screening applications. These tools support, but do not replace, human judgment in making hiring decisions.
Your application will be considered complete only after you have completed the full registration process on the Keystone AI platform, including creating your profile, uploading your CV, and submitting your application. The AI interview is optional but encouraged and is not required for your application to be considered.
By submitting your personal data and/or resume, you give consent to collection, use and disclosure of your personal data and/or resume by the company (or its agent) for the purpose of the processing and administration by the company relating to this job application. Read our Privacy Policy.
CGP Group is an affirmative equal-opportunity employer and recruitment firm. We evaluate qualified applicants without regard to race, color, religion, creed, gender, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. Information provided in this advertisement is for recruitment purposes only.