Cyber and IT Security Advisory Specialist

About the role

The Cyber and IT Security Advisory Specialist will lead security advisory and oversight for AWS cloud architectures, ensuring they follow security‑by‑design and defense‑in‑depth principles. You will work closely with cross‑functional teams to embed security best practices across the organisation.

Key responsibilities

• Define, implement and enforce AWS cloud security standards, guardrails and best practices across accounts, regions and workloads.
• Conduct security architecture reviews for AWS‑based applications, covering VPC design, IAM models, data protection and network segmentation.
• Track remediation of cloud security findings and ensure compliance with regulatory frameworks such as MAS TRM and NIST.
• Collaborate with internal and external stakeholders to assess, monitor and reduce security risk.
• Manage project risks, issues and escalation within governance processes.
• Oversee CAPEX and OPEX budgets for security services and report to governance committees.
• Lead incident management, mitigation planning, damage assessment and corrective actions.
• Review vulnerability assessments and penetration testing results to define residual risk and mitigation plans.

Required profile

• Bachelor's degree in Computer Science or related field.
• 6‑10 years of experience in a highly regulated IT security environment, including at least 5 years in threat intelligence, incident response and VAPT.
• Proven ability to lead multiple security solutions across domains such as cyber program management, identity & access management and data protection.
• Experience managing security budgets and reporting to senior committees.

Required skills

• AWS cloud security and native cloud services.
• VPC design, IAM, data protection, network segmentation.
• Knowledge of MAS TRM, NIST and other regulatory frameworks.
• Threat intelligence, incident response, vulnerability assessment and penetration testing.
• Firewall, IDS/IPS, proxy technologies.
• TCP/IP protocol suite and OSI Seven Layer Model.
• Windows enterprise environments.