Senior Information Security Architect & Risk Advisor

Singtel Group; Kuala Lumpur; On-site; MYR 120,000 - 240,000; Full time

Job summary

Singtel is seeking a Senior Information Security Specialist to provide independent security architecture and risk assurance across technology initiatives. You will identify risks, assess them, and ensure they are managed throughout the lifecycle while advising stakeholders to strengthen the organisation's security posture.

Responsibilities include risk assessments, architecture validation, threat modelling, governance, and continuous improvement of security controls in a large telecom

Qualifications

• Degree or Diploma in Information Technology, Computer Science, Engineering or a related field.
• Minimum 6 years of experience in security assessment, cybersecurity or related IT roles.
• Experience in systems security, network security, identity and access management or virtualization security.
• Strong capability in threat modelling and risk assessment with remediation recommendations.
• Ability to apply Zero Trust security architecture principles in complex environments.
• Experience translating security baselines into architecture and control requirements.

Responsibilities

• Perform information security risk assessments for systems, apps and third parties.
• Review security designs across infrastructure, cloud, IAM, data protection and apps.
• Conduct threat modelling and provide risk advisory to stakeholders.
• Ensure compliance with security policies and drive continuous improvement.
• Escalate residual risks and collaborate across complex tech environments.

Skills

Threat modelling

Security assessment

Security architecture

Zero Trust

Stakeholder communication

Independent work

Governance awareness

Education

Degree or Diploma in IT/CS/Engineering

Job description

Singtel is seeking a Senior Information Security Specialist to provide independent security architecture and risk assurance across technology initiatives. You will identify risks, assess them, and ensure they are managed throughout the lifecycle while advising stakeholders to strengthen the organisation's security posture.

Responsibilities include risk assessments, architecture validation, threat modelling, governance, and continuous improvement of security controls in a large telecom