{"id":2145827,"url":"https://alion.io/job/pixlr-manager-it-security","title":"Manager, IT Security","company":{"id":177743,"name":"Pixlr","domain":"pixlr.com","url":"https://alion.io/company/pixlr","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"C","score":56,"open_postings":15,"ghost_share":0.733,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Management","role_family":"Management","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bandar Sunway, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14000,"max_usd":33000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":15},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SOC 2","optional":false},{"name":"Kubernetes","optional":true},{"name":"SBOM","optional":true}],"status":"live","first_seen_at":"2026-07-21T00:00:00Z","employer_posted_date":"2026-07-21","last_verified_at":"2026-10-15T18:12:23Z","board_verified":true,"closed_at":null,"days_open":86,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":86},"description":"We’re hiring a hands-on IT Security Manager to own product, cloud, and corporate security across Pixlr. You’ll define and run our security program, from policy and risk to AppSec and incident response, while partnering closely with Engineering, IT, Product, Legal, and Operations.\nThe Job:\n1. Security Governance, Risk & Compliance\nEstablish and maintain the security policy stack, aligned with ISO 27001, SOC 2 controls, and applicable privacy regulations (e.g., PDPA, GDPR).\nConduct security risk assessments, vendor and third-party reviews, and data classification activities.\nSupport audit readiness through evidence collection, control testing, and maintenance of security control mappings.\n2. Application & Product Security\nEmbed security practices within the software development lifecycle, including threat modelling, secure coding standards, and security reviews.\nOwn and operate application security tooling within CI/CD pipelines, including static, dynamic, and dependency analysis.\nGuide engineering teams on secure design principles, OWASP Top 10, API security, and supply-chain risk considerations.\n3. Cloud & Platform Security\nImplement and operate cloud security controls across AWS environments, including identity management, logging, monitoring, and threat detection services.\nDefine baseline hardening standards, guardrails, and policy-as-code controls for cloud and infrastructure environments.\nDrive container, serverless, and data protection security practices, including encryption and key management.\n4. Detection, Response & Resilience\nDevelop and maintain incident response plans and coordinate security incident handling with Engineering and IT teams.\nOperate centralised security logging, alerting, and detection capabilities.\nMaintain business continuity and disaster recovery security requirements, including backup and recovery verification.\n5. Access Hygiene & Privacy\nEnforce identity lifecycle management and access controls across cloud platforms, SaaS systems, and data environments.\nPartner with Legal and Data teams on privacy impact assessments, data retention practices, and data loss prevention controls.\n6. Culture, Enablement & Operations\nDeliver security awareness and role-based training for engineering, product, and operations teams.\nDefine and track security operational metrics to monitor risk, control coverage, and remediation effectiveness.\nBalance security requirements with delivery velocity and cost considerations through cross-functional collaboration.\nRequirements\nThe Person:\n6-10 years of experience in IT or application security, including ownership of security programmes or AppSec/CloudSec functions.\nStrong hands-on experience with application security, secure SDLC practices, and vulnerability management.\nPractical expertise in AWS security services, identity and access management, and cloud security monitoring.\nExperience with common security tooling, including SAST, DAST, dependency scanning, secret management, and security logging platforms.\nSolid understanding of security governance frameworks and regulatory principles, including ISO 27001, SOC 2, PDPA, and GDPR.\nProven ability to lead incident response activities and communicate security risks clearly to technical and non-technical stakeholders.\nNice-to-Haves\nCertifications: CISSP, CCSP, AWS Security Specialty, ISO 27001 Lead Implementer/Auditor.\nExperience with creative/EdTech or high-scale consumer SaaS; exposure to SOC 2/ISO27001 journeys and GRC platforms (e.g., Drata/Vanta).\nContainer/Kubernetes security, serverless security, and SBOM/supply chain practices.\nBenefits\n Annual Leaves- Additional annual leave will be credited to you on a yearly basis.\n Medical and Insurance Coverages - We have got you covered.\n Subsidies - Enhancing your well-being, we offer optical and dental subsidies.\n Opportunities - Above training and guidance, you will have the opportunity to try, to build your confidence and become your best self, and to interact and build a strong relationship.\n Rocking Diversity - Play hard, work harder with people of diverse skill sets and experiences! Challange yourself to step out of your comfort zone, and you'll find yourself growing in way you'd never imagine.","description_format":"text","description_chars":4225,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Annual leave","Insurance coverage"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-09T04:22:02Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.318,"p_room":0.28,"age_days":86,"expected_fill_days":24,"reasons":["conf:3","stale_co","win:tail","crowd:"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/pixlr-manager-it-security","json_url":"https://alion.io/job/pixlr-manager-it-security.json","meta":{"generated_at":"2026-10-15T21:00:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31865,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":177743},"rest":"https://alion.io/mcp/rest/get_company?id=177743"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpixlr-manager-it-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpixlr-manager-it-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpixlr-manager-it-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pixlr-manager-it-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpixlr-manager-it-security"}]}