Information Security Specialist

Singtel; Kuala Lumpur; On-site; Confidential; Full time

Job summary

Singtel is Asia's leading telecommunications group focused on innovation and digital transformation. We are seeking an Information Security Specialist to provide security architecture risk and cloud compliance assurance across technology initiatives.

You will act as a security risk and cloud security advisor to Singtel IT, Telco Networks and Enterprise stakeholders, guiding secure delivery while strengthening cloud security governance.

Qualifications

• Degree or Diploma in IT, CS, Engineering or related field.
• Minimum 4 years of experience in security assessment, cybersecurity or related IT roles.
• Hands-on system and security administration across apps, infrastructure, telco networks, cloud and cybersecurity technologies.
• Knowledge of cloud security technologies including CNAPP, DevSecOps and containers.
• Ability to apply Zero Trust security architecture principles such as defence-in-depth, least privilege and secure-by-design.

Responsibilities

• Perform security risk assessments for new and existing systems and cloud engagements.
• Review architecture diagrams and controls to mitigate technology risks.
• Ensure compliance with security policies and governance across initiatives.
• Apply Zero Trust security architecture in complex enterprise environments.
• Provide risk advisory to IT, application teams and business stakeholders.

Skills

Security risk assessment

Cloud security

Zero Trust

Governance & reporting

Risk management

Education

Degree or Diploma in IT/CS/Engineering

Tools

CNAPP

Containers

DevSecOps

Job description

Be a part of something BIG!

Say HELLO to BIG Possibilities with Singtel!

Singtel is Asia's leading communications technology group, driven by innovation, digital transformation and the use of technology to create a more sustainable and connected future.

We are looking for an Information Security Specialist to provide security architecture risk and cloud compliance assurance across technology initiatives. In this role, you will help ensure security risks are identified early, assessed consistently and managed effectively throughout the system lifecycle. You will act as a security risk and cloud security advisor to Singtel IT, Telco Networks and Enterprise stakeholders, supporting secure delivery while strengthening cloud security compliance and risk management.

Make An Impact By

• Security Risk Assessment & Assurance
• Support comprehensive information security risk assessments for new and existing systems, applications, infrastructure changes and cloud engagements.
• Assess design documents, architecture diagrams and technical controls to confirm that technology risks are mitigated prior to go-live.
• Ensure technology initiatives and controls comply with internal security policies, standards and governance requirements, proactively highlighting gaps and recommending remediation.
• Articulate and document residual risk assessments and define appropriate compensating controls for identified risks.
• Cloud Security & Compliance
• Review security-related configurations in cloud environments using industry tools and work with application teams to remediate insecure configurations.
• Drive governance oversight and processes for cloud security compliance, best practices and risk management.
• Support management reporting of cloud security risks, remediation plans and security metrics.
• Apply cybersecurity and cloud risk management requirements, security standards and recognised best practices across technology initiatives.
• Security Architecture & Advisory
• Collaborate with IT, application teams and business stakeholders to provide risk advisory for projects and ad hoc reviews.
• Apply Zero Trust security architecture principles, including defence-in-depth, least privilege and secure-by-design, in complex enterprise environments.
• Evaluate architecture and technology decisions, identify control gaps and recommend risk-based mitigations.
• Translate technical security issues into clear business and risk implications to support informed stakeholder and management decisions.
• Technology Security & Remediation
• Work with application and technology teams to identify and remediate security weaknesses across applications, infrastructure, telco networks and cloud environments.
• Support security administration, implementation and solution design activities across relevant technology domains.
• Contribute to cybersecurity risk assessment and risk reduction initiatives, including cloud-native environments and related security technologies.
• Support secure implementation practices across technologies such as CNAPP, DevSecOps and containers where applicable.
• Governance, Reporting & Continuous Improvement
• Support consistent cloud security governance and risk management practices across projects and operational environments.
• Provide clear security metrics, risk reporting and remediation status updates to support management oversight.
• Keep current with evolving cybersecurity threats, regulatory requirements and security best practices relevant to cloud and telecommunications environments.
• Contribute to continuous improvement of security processes, controls and ways of working.

Skills For Success

• Degree or Diploma in Information Technology, Computer Science, Engineering or a related field.
• At least 4 years of experience in security assessment, cybersecurity or related IT roles.
• Hands-on experience in system and security administration, implementation or solution design across applications, infrastructure, telco networks, cloud and cybersecurity technologies.
• Knowledge of cloud security technologies and practices, including CNAPP, DevSecOps and containers.
• Ability to apply Zero Trust security architecture principles such as defence-in-depth, least privilege and secure-by-design.
• Experience in cybersecurity risk assessment and risk reduction initiatives.