Cloud Security Lead Engineer / Manager

About the role

A well-established enterprise undergoing major cloud transformation is looking for an experienced Cloud Security Manager in Singapore. The role shapes cloud security strategy, drives governance and risk management, and ensures secure adoption of cloud technologies. It works closely with infrastructure, engineering, DevOps, technology risk and cybersecurity teams.

Key responsibilities

• Develop the cloud security roadmap and operating model, define standards, policies and controls, and champion security-by-design
• Review cloud solution designs, advise on architecture risks and secure configurations, and drive guardrails, automation and DevSecOps
• Set up identity management frameworks, manage privileged accounts and lead entitlement reviews
• Oversee continuous monitoring, vulnerability remediation and incident response, and improve detection, response and recovery
• Ensure compliance with policies, regulations and standards; run assessments, threat modelling and risk reviews; coordinate penetration testing and support audits
• Work with infrastructure, application and network teams, manage vendor relationships, and run awareness and mentoring programmes

Required profile

• Degree in Computer Science, Information Security, Engineering or a related field
• 5-10 years in cybersecurity, including several years in cloud security and cloud architecture
• Proven track record in cloud governance, access control, data protection, network security and security operations
• Strong understanding of ISO 27001, NIST, CIS Controls, SOC reporting and financial-sector technology risk guidelines
• Ability to work with technical and business stakeholders; preferred candidates have driven cloud security transformation and engaged senior stakeholders

Required skills

• Hands-on knowledge of AWS security services (identity, monitoring, logging, encryption, threat detection, WAF)
• Experience implementing cloud security controls in cloud-native environments
• Familiarity with Terraform or CloudFormation
• Certifications such as CISSP, CISM, CCSP, AWS Security Specialty or AWS Solutions Architect highly regarded