Cyber Security Architect (Assurance & Risk)

About the role

NCS, a technology services firm operating across the Asia Pacific region, is hiring a Cyber Security Architect focused on assurance and risk in Singapore. The role covers security architecture and design, implementation assurance, security testing, risk management and data security, acting as a cybersecurity subject matter expert for project teams, customers and vendors.

Key responsibilities

• Translate security requirements (e.g., IM8, client policies) into architecture designs and review, enhance and validate security architecture, controls and solutions
• Perform threat modelling and technical risk assessments, and support security design reviews and clearance processes (e.g., ACISO)
• Guide delivery teams on secure implementation, validate it against approved architecture, and identify and address security gaps, deviations and non-compliances
• Recommend security technologies and compensating controls
• Review security testing activities such as SSAT and VAPT, validate findings, remediation plans and retest results, and guide improvements
• Lead development and review of deviations, risk registers and risk assessments, assessing risks by discoverability, exploitability, reproducibility, likelihood and impact, and supporting risk acceptance
• Advise on data classification, data protection (in transit and at rest), access controls and governance, aligned with applicable frameworks
• Act as cybersecurity SME, lead technical discussions, support audits and reviews, and advise operations and SOC teams
• Periodically review and enhance security architecture and controls

Required profile

• 8-15+ years in cybersecurity (architecture, engineering or risk)
• Experience in large-scale ICT or regulated/government environments preferred
• Experience in risk assessment and deviation management (e.g., MDL)
• Strong stakeholder management and communication skills, able to translate technical risks into business impact
• Structured, analytical and delivery-oriented mindset
• Singapore citizenship required due to government project sensitivity

Required skills

• Security architecture across network, systems, applications and cloud
• IAM / PAM, security hardening, vulnerability management
• Security testing (VAPT, SSAT)
• Familiarity with IM8, ISO 27001, NIST, CIS frameworks and data security principles
• CISSP, CISM, CISSAT, TOGAF, SABSA, GAF, cloud security certifications (advantageous)
• Familiarity with modern domains such as cloud, containers, AI/OT (advantageous)