Cloud Security Manager

At Provido, we’re more than a technology company. We are a global hub of innovation, creativity, and engineering excellence.

Our teams design and deliver intelligent, secure, and high-performance digital solutions that help organizations modernize operations, scale their platforms, and succeed in an increasingly digital world.

As part of a dynamic international ecosystem, we bring together forward-thinking engineers, technology specialists, designers, and delivery professionals who transform ideas into scalable, real-world solutions with measurable business impact.
If you are motivated by challenge, inspired by technology, and ready to grow with a company that truly invests in its people, your journey starts here.

Why We Need You

The Cloud Security Manager is responsible for designing, implementing, and overseeing the organization’s cloud security strategy, controls, and operational practices across its multi-cloud environments. This role leads the protection of cloud workloads, identities, data, and platforms hosted on AWS, Azure, and GCP, ensuring secure configuration, threat detection, and compliance with organizational and regulatory requirements. The Lead will define cloud security architecture standards, drive remediation of misconfigurations and vulnerabilities, mature posture management capabilities, and partner with engineering, DevOps, and platform teams to embed security into the cloud delivery lifecycle. The role requires strong technical leadership, hands-on cloud expertise, and the ability to coordinate with global security operations, infrastructure, application, and business stakeholders.

What You’ll Be Doing

• Lead the design, implementation, and continuous improvement of cloud security controls across AWS, Azure, and GCP environments, covering identity, network, data, workload, and platform security.
• Define and maintain cloud security architecture standards, reference patterns, baselines, and guardrails aligned with industry frameworks such as CIS Benchmarks, NIST, and the Cloud Security Alliance.
• Operate and mature Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), and Cloud-Native Application Protection Platform (CNAPP) tooling, including detection, prioritization, and remediation of misconfigurations and vulnerabilities.
• Partner with engineering, DevOps, and platform teams to embed security into Infrastructure-as-Code, CI/CD pipelines, container, and Kubernetes deployments through automation, policy-as-code, and shift-left practices.
• Lead investigation and response to cloud-related security incidents in coordination with the SOC, incident response, and platform teams, and drive root-cause analysis and preventive improvements.
• Manage cloud identity and access security, including IAM hardening, privileged access controls, federation, secrets management, and continuous review of entitlements and permissions.
• Support audit, regulatory, and compliance activities by maintaining evidence of cloud control design, configuration, monitoring, remediation outcomes, and continuous improvement actions.
• Maintain awareness of evolving cloud threats, attacker techniques, and platform changes affecting AWS, Azure, GCP, and SaaS services relevant to the organization’s operating footprint.

What You Bring to the Team

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.
• 5+ years of experience in cybersecurity, with at least 4 years focused on cloud security across AWS, Azure, or GCP, including a track record of leading cloud security initiatives or technical teams.
• Strong understanding of cloud security architecture, identity and access management, network security, encryption, data protection, and workload security in public cloud environments.
• Hands-on experience with CSPM, CWPP, or CNAPP tooling, Infrastructure-as-Code security (Terraform, CloudFormation), and container or Kubernetes security.
• Demonstrated ability to translate cloud risks into clear technical recommendations, remediation plans, and architecture decisions for engineering, leadership, and business audiences.
• Strong written and verbal English proficiency to support multinational stakeholders and present cloud security topics to technical and executive audiences.

Preferred Skills

• Professional certifications such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer or Cybersecurity Architect Expert, Google Professional Cloud Security Engineer, CCSP, CCSK, CISSP, or equivalent senior cloud or security credentials.
• Experience leading cloud security in regulated environments such as financial services, telecommunications, healthcare, or critical infrastructure.
• Experience in the gaming or interactive entertainment industry, including familiarity with platform security, player data protection, anti-fraud, and high-availability online service environments.
• Exposure to multi-cloud security tooling, SIEM and SOAR integration of cloud telemetry, cloud-native logging (CloudTrail, Azure Activity Logs, GCP Audit Logs), and threat detection at scale.
• Experience implementing Zero Trust architectures, secure landing zones, cloud detection engineering, and DevSecOps practices at enterprise scale.
• Knowledge of the MITRE ATT&CK framework for cloud, cloud-specific threat actor techniques, and emerging attack patterns against SaaS and cloud workloads.
• Understanding of compliance frameworks such as ISO 27001, SOC 2, and other regulations relevant to cloud workloads in Malaysia and Southeast Asia.

Why You’ll Love Working with Us

• Employee Benefits & Advantages

At Provido, we value our employees and nurture a culture of progress and creativity. Our team members enjoy a supportive, inclusive, and growth-focused environment.

• Competitive Compensation & Performance Incentives

Provido offers an attractive salary package and performance-based bonuses to recognize and reward your contribution.

• Flexible Working Options

We support remote and hybrid working models to help you maintain a healthy work-life balance.

• Health & Well-being Support

We provide comprehensive health insurance, wellness initiatives, and resources to support both physical and mental well-being.

• Career Advancement & Development Programs

We invest in continuous learning through training programs, mentorship, and clearly defined career development paths.

• Team-Oriented & Inclusive Workplace

Our culture is built on diversity, inclusion, and collaboration. Every voice matters and innovation is encouraged.

• Team Events & Social Activities

We organize regular team-building activities and social events to strengthen relationships and create a positive, connected workplace.