Information Security Specialist (Security Architecture & Risk)

About the role

A leading technology organisation operating large-scale digital platforms, critical infrastructure and enterprise services is hiring an Information Security Specialist focused on security architecture and risk. The role shapes secure technology designs across enterprise and network environments and leads security risk assessments, architecture reviews and threat modelling. It is based in Singapore and is advertised by a consultant.

Key responsibilities

• Conduct security risk assessments for applications, infrastructure, cloud platforms and third-party services
• Review solution architectures and security designs to identify risks and control gaps
• Perform threat modelling and recommend design-level mitigations
• Validate security controls across identity management, networks, data protection and application security
• Advise project teams on cybersecurity requirements throughout the project lifecycle
• Develop and promote secure architecture patterns, standards and best-practice frameworks
• Drive continuous improvement of security assurance processes, methodologies and governance

Required profile

• Degree or diploma in Information Technology, Computer Science, Engineering, Cybersecurity or a related discipline
• Experience in cybersecurity, information security assessment, technology risk or security architecture roles
• Background in network security, identity and access management, systems security, cloud security or virtualisation security
• Proven experience in security assessments, architecture reviews and technology risk evaluations
• Experience applying Zero Trust principles in complex enterprise environments
• Professional certifications such as CISSP, CISM, CCSP, SABSA or TOGAF Security are highly regarded

Required skills

• Threat modelling and security design review practices
• Interpretation of security standards, baselines, regulatory requirements and governance frameworks
• Assessment of compliance gaps and recommendation of remediation strategies
• Stakeholder management, communication, analytical and problem-solving skills

What we offer

• Influence on cybersecurity strategy across large-scale technology environments
• Exposure to enterprise, cloud, network and digital transformation initiatives
• Career progression within a mature cybersecurity function
• Ongoing investment in certifications, training and technical development
• Competitive remuneration and comprehensive employee benefits