Assistant Lead Engineer - Security Risk Assessment (Cyber Risk Management & Services)

Synapxe; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

Synapxe is seeking an Assistant Lead Engineer to lead security risk assessment within Cyber Risk Management & Services. The role covers governance, risk, assurance across the SDLC and oversight of vulnerability management and third-party risk.

You will guide BSG in aligning with IT security policies and regulatory frameworks, conduct comprehensive risk assessments, and provide strategic security advisory to stakeholders. A 2-year direct contract role with opportunities for impact and growth.

Qualifications

• Degree in CS/IS/Engineering or equivalent.
• At least 12 years IT security experience in multiple domains including governance, risk, and architecture.
• Cloud platforms such as AWS, Azure or Google Cloud desirable.
• Professional security certifications (CISSP, CISM, CISA, CCSP, CRISC) advantageous.
• Self-motivated with ability to work independently with minimal supervision.
• Strong interpersonal and stakeholder management and communication skills.

Responsibilities

• Provide guidance to BSG to ensure compliance with IT security policies throughout the lifecycle.
• Conduct security risk management including identification, assessment and treatment of risks per framework.
• Guide vulnerability assessments, code review and penetration testing with remediation timelines.
• Provide security consulting and advisory to BSG.
• Review RFP proposals for security requirements.
• Review architecture design from Enterprise/Solution/Security Architects.
• Perform cybersecurity assurance across SDLC stages.
• Evaluate third-party vendor and product risks and mitigation measures.
• Perform independent assessments of security controls in projects/systems.
• Review and improve IT security policies, frameworks, standards and procedures.

Skills

Security governance

Risk management

Application security design

Security project management

Security operations

Cloud security technologies

Network access

Identity governance and access mgmt

Privileged access & identity mgmt

Security information & event mgmt

Education

Degree in Computer Science, Information Systems, Engineering or equivalent

Job description

Select how often (in days) to receive an alert:

Assistant Lead Engineer - Security Risk Assessment (Cyber Risk Management & Services)

The Assistant Lead Engineer is expected to have strong expertise in security governance, risk management, and cybersecurity assurance across the system development lifecycle. Demonstrated ability to conduct security risk assessments, review solution architectures, evaluate third-party and technology risks, and provide strategic security advisory to stakeholders. Well-versed in vulnerability management, penetration testing oversight, secure development practices, and policy development, with a proven track record of driving compliance with security standards, strengthening control effectiveness, and enhancing organizational cybersecurity posture.

This is a 2 year direct contract role.

Role & Responsibilities

• Provide guidance to Business Services Group (BSG) in ensuring that projects/systems comply with Company’s IT security policies and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the projects/systems lifecycle
• Perform security risk management, including identification, assessment and provide treatment of security risks associated with systems handled by Business Services Group. Risk assessment must be performed in accordance with the Company’s cybersecurity risk management framework
• Provide guidance to Business Services Group related to vulnerability assessments, source code review and penetration testing so that remediation actions can be undertaken by Business Services Group within the agreed timelines
• Provide security consulting and advisory to Business Services Group
• Review RFP proposal compliance with security requirements
• Review architecture design developed by Enterprise/Solution/Security Architect
• Perform cybersecurity assurance activities across the different stages of SDLC
• Evaluate risks related to third-party vendors, products and identify mitigating measures
• Perform independent assessments of the technical security controls implemented within the projects/systems to determine the overall effectiveness of the controls
• Review and propose improvements to IT security policies, framework, standards, procedures and best practices

Requirements

• Degree in Computer Science, Information Systems, Engineering or equivalent
• At least 12 years of IT security experience in more than one of the following: security governance, risk management, application security design, security project management, security operation, cloud security technologies, network access, identity, governance and access management, privileged access and identity management, security information and event management
• Knowledge of cloud platforms such as AWS, Azure or Google cloud is desirable
• Professional security certification such as CISSP, CISM, CISA, CCSP, CRISC or other similar security certifications are advantageous
• Self-motivated with the ability to work independently with minimal supervision and willingness to listen
• Strong interpersonal and stakeholder management skills with good written and verbal communication skills