Can you strengthen cloud security posture, detection and compliance across a global multi-cloud landscape?

Join FrieslandCampina as Cloud Security & Compliance Specialist in the Cloud & Hosting Department. You will help secure AWS and Azure platforms through cloud governance, CSPM, CDR/XDR integration, IAM guardrails, policy-as-code, audit readiness and continuous compliance.

We are looking for a Cloud Security, Risk & Compliance Specialist to join the Cloud & Hosting Department and strengthen secure, compliant and scalable cloud adoption across FrieslandCampina. You will work across AWS and Azure, translating security and compliance requirements into guardrails, reusable patterns and automated controls.

A key focus is Cloud Security Posture Management (CSPM), providing visibility into misconfigurations, vulnerabilities, exposures and compliance gaps. You will also support Cloud Detection and Response (CDR) and Extended Detection and Response (XDR) by integrating cloud security signals with SIEM, SOAR and XDR platforms. Working with Cloud & Hosting, Cloud Architects, Cyber Security, SOC, DevOps, service owners and suppliers, you will support cloud onboarding, risk remediation and continuous improvement.

Key responsibilities

• Define security standards, baseline controls and compliance guardrails across AWS, Azure and Cloud Edge Services.
• Strengthen CSPM through secure-score improvement, exposure and vulnerability visibility, risk prioritisation and remediation.
• Automate security controls across cloud accounts, subscriptions, workloads and platform services.
• Drive IAM governance, least privilege, RBAC, access reviews and secrets management using Azure Key Vault and AWS Secrets Manager.
• Implement policy- and compliance-as-code using Azure Policy, AWS SCPs, Terraform, Bicep or CloudFormation.
• Embed security scanning and compliance checks into CI/CD and provisioning pipelines.
• Support CDR across cloud control planes, identities, networks, containers, APIs, workloads and runtime signals.
• Integrate cloud alerts with SIEM, SOAR and XDR platforms to improve detection, investigation and response with Cyber Security and SOC teams.
• Define security standards for non-production, test, stage and production environments.
• Enable drift detection, continuous compliance, logging, monitoring and observability.
• Improve compliance dashboards, audit evidence, exception, risk and remediation tracking.
• Support secure landing zones, workload onboarding and reusable architecture patterns.
• Align security controls with FinOps, tagging, cost allocation and governance.
• Maintain security playbooks, standards, onboarding checklists and guidance.

Candidate requirements

• Bachelor’s degree in Computer Science, IT, Cyber Security, Cloud Computing, Engineering or a related field, or equivalent experience.
• Preferred certifications include CCSP, Azure Security Engineer Associate or AWS Certified Security – Specialty. Azure Solutions Architect, CKS and ITIL are advantageous.
• Hands-on knowledge of AWS and Azure security, landing zones, CSPM/CNAPP, CDR, XDR, SIEM, SOAR and workload protection.
• Experience with Trend Vision One/Cloud One Conformity, Microsoft Defender for Cloud, Sentinel, Defender XDR or equivalent platforms.
• Strong knowledge of IAM, RBAC, privileged access, secrets management, DevSecOps, CI/CD security and infrastructure-as-code.
• Knowledge of CIS, ISO 27001, NIST, Microsoft Cloud Security Benchmark and cloud-provider security practices.

Experience requirements

• 5–8 years’ experience in IT, cloud engineering, cyber security, infrastructure security or hosting operations.
• 3–5 years’ hands-on AWS and/or Azure experience.
• 2–3 years’ experience in cloud security, compliance, governance, DevSecOps or security operations.
• Practical experience with CSPM/CNAPP, workload protection, security monitoring, audits, compliance and risk remediation in enterprise environments.

Behavioral capabilities 

You can translate technical risks into practical actions, work independently across global teams, challenge decisions using a risk-based approach, influence stakeholders, balance security with business needs, and drive improvement through collaboration and automation.

For thousands of people every day, we are more than just a dairy company. To our farmers, our employees, the communities we serve, the businesses we work with and the people to whom we bring happiness, FrieslandCampina means something more. For them, it is not just about what we do, but who we are.

We value talented people from any background who want to contribute to something bigger than themselves. We encourage all our employees to make decisions that benefit our entire company. At FrieslandCampina, we own our own career and act accordingly. We trust you to make a difference in your job and influence the bigger picture. Working at FrieslandCampina means you are contributing to a better world.

You will be part of the Cloud & Hosting Department, which is responsible for enabling secure, scalable, compliant and cost-effective cloud and hosting services across FrieslandCampina. The department supports global cloud platforms, hosting services, governance, FinOps, DevOps enablement, landing zones, security controls, marketplace capabilities and cloud operating model maturity.

The Cloud & Hosting Department works closely with Enterprise Architecture, Cyber Security, IT clusters, business technology teams, suppliers and cloud providers to ensure our cloud and hosting platforms are reliable, secure, governed and ready for future business needs.

This position is based in Petaling Jaya, Malaysia, with a global scope and frequent collaboration with colleagues and stakeholders across different regions.