~5mo ago

IT Security Lead

Malaysia·Kuala Lumpurmid

EngineeringSecurityOtherSecurity Officer

2 views0 saves0 applied

Overview

Location: Kuala Lumpur, Malaysia (Hybrid, Full Time) About the Company A leading real-world asset (RWA) tokenization platform,

Technical Tools

awscybersecurityfintechnetworkingsystem-design

~1 min read

A chance to directly contribute to the success and growth of one of the most reputable and regulated RWA tokenization platforms in the space, with a proven commercial track record
Supportive culture that values clear communication and high-quality execution
Competitive compensation
Eligibility to participate in the Employee Stock Option Scheme and token incentive allocation
Flexible work arrangements

~1 min read

→Own and maintain security controls across AWS (IAM, access, logging, network security)
→Identify and remediate threats, vulnerabilities, misconfigurations, and access risks across systems
→Maintain and actively manage the Technology Risk Management (TRM) register, including risk identification, tracking, and remediation
→Act as the security gatekeeper, performing security reviews of all new features, smart contract integrations, and system architectures prior to launch
→Act as the primary owner of security vendors (MSSP, monitoring tools, Web3 security providers), ensuring effective coverage and response capability
→Monitor system health, investigate security alerts, and lead incident response, including coordination with internal teams and external providers for containment, recovery, and escalation
→Design and maintain institutional-grade wallet and transaction security controls, ensuring the integrity of minting and redemption processes
→Lead third-party and vendor risk reviews, including technical due diligence for integrations, web3 protocols, and service providers
→Support the testing and continuous improvement of disaster recovery and resilience processes
→Maintain and enhance recovery procedures for critical systems

5–8 years in IT security, security engineering, or DevSecOps, with at least 2–3 years specifically within crypto or a web3-native environment
Experience working within a regulated environment (e.g. MAS, BMA, FCA, SEC) preferred
Strong hands-on experience in cloud security (AWS preferred: IAM, logging, networking)
Strong understanding of blockchain security fundamentals (Ethereum/EVM, smart contract vulnerabilities, and oracle risks)
Hands-on builder, can design and implement independently
Experience working with or managing external security vendors
Experience in startups / fast-moving environments