about the company
Join a globally established organisation with a strong international presence and a culture built around innovation, collaboration and continuous development.
This opportunity sits within a regional technology environment where you will work alongside colleagues from different nationalities and collaborate across regional and global initiatives. The organisation offers international exposure, structured learning opportunities, cross-functional collaboration and a modern, flexible working environment in Kuala Lumpur.
...
about the job
We are looking for an experienced Cybersecurity Business Partner to act as the trusted bridge between Cybersecurity, IT and Business, helping to embed security and risk considerations into technology decisions, transformation initiatives and day-to-day IT delivery.
In this role, you will partner closely with IT Management, Business Leaders, Technology Delivery Teams, Risk Owners and Central Cybersecurity Functions to provide cybersecurity expertise, facilitate informed decision-making and ensure security requirements are addressed early throughout the technology lifecycle.
You will have the opportunity to work across a diverse technology landscape, including Infrastructure Security, Application Security and DevSecOps, with exposure to major cloud and enterprise ecosystems such as Microsoft Azure, AWS and SAP / S/4HANA.
Key Responsibilities:
- Act as a trusted cybersecurity advisor and business partner to IT and business stakeholders.
- Provide cybersecurity expertise and decision support during Architecture & Security Reviews, ensuring appropriate security considerations are incorporated into technology and solution designs.
- Partner with IT delivery teams and security stakeholders to identify, assess and manage cybersecurity risks, including the alignment and acceptance of residual risks where required.
- Embed Security-by-Design and Privacy-by-Design principles into technology planning, architecture, software development and delivery processes.
- Provide guidance across key technology domains, including Infrastructure Security, Application Security, DevSecOps, Cloud Security and Enterprise Applications.
- Support and advise on cybersecurity considerations within Microsoft Azure, AWS and SAP / S/4HANA environments.
- Work closely with technology and delivery teams to understand how cybersecurity requirements impact cloud adoption, software development, application delivery and enterprise technology transformation.
- Support IT assurance and compliance activities and help ensure cybersecurity requirements are effectively implemented within your area of responsibility.
- Collaborate with stakeholders across Security Architecture, Cyber Defence, IT Delivery, Risk Management and Business Functions to drive a consistent and practical approach to cybersecurity.
- Translate complex cybersecurity concepts, risks and technical trade-offs into practical and meaningful discussions for both technical and non-technical stakeholders.
- Take ownership of cybersecurity topics within your assigned area and proactively identify opportunities to continuously improve the organisation's overall cybersecurity posture.
This is an excellent opportunity for a cybersecurity professional who has strong technical credibility but is looking to move into a more strategic, consultative and business-facing role, with the opportunity to influence cybersecurity decisions across cloud, applications, infrastructure and enterprise technology environments.
about the manager/team
You will be part of a globally connected technology and cybersecurity environment, working closely with IT management, business leaders, technology delivery teams, risk owners, security architecture and cyber defence functions.
The role offers significant stakeholder exposure and requires someone who can confidently engage with both technical and non-technical audiences. You will work in an agile and globally distributed environment, collaborating across governance, architecture and delivery functions while helping teams balance cybersecurity requirements with practical business and technology objectives
