Cyber Cloud platform Security Engineer

3 CUBED BUSINESS CONSULTING PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

3 CUBED BUSINESS CONSULTING PTE. LTD. seeks a cybersecurity readiness specialist to manage the Go-Live tracker for new systems, tech refreshes, and migrations in Singapore.

You will ensure artefact completeness, coordinate with IT security stakeholders, and prepare consolidation reports for PUB Cybersecurity review. The role includes Azure RBAC administration, reviewing cloud access requests, maintaining auditable access records, and enforcing timely removal or downgrade of elevated privileges.

Responsibilities

• Maintain and monitor the Cybersecurity Go-Live tracker for new systems, tech refresh and migrations, including ownership, outstanding evidence, target go-live date and closure status.
• Perform first-level completeness checks of go-live artefacts before submission to the Board’s Cybersecurity team. Artefacts may include the BIA, Risk Assessment, final system architecture, IT asset inventory, hardening evidence, VA/PT/SCR reports where applicable, System Security Plan, security logging and monitoring onboarding, backup/DR evidence, and cloud security monitoring evidence.
• Check that cybersecurity assessment reports and supporting evidence are the latest submitted versions and clearly identify unresolved findings, deviations or risk-treatment items requiring further review.
• Coordinate with System OICs, infrastructure teams, application vendors and IT Security Officers to close outstanding go-live prerequisites and maintain evidence of follow-up.
• Track pre-go-live and post-go-live actions and verify that temporary access, troubleshooting rules and elevated privileges identified for removal or downgrade are followed up.
• Prepare a consolidated readiness status for PUB Cybersecurity review and accelerate blockers or overdue items that may affect planned go‑live.

Job description

Roles and Responsibilities

System Go-Live Cybersecurity Readiness and Clearance Support

• Maintain and monitor the Cybersecurity Go-Live tracker for new systems, tech refresh and migrations, including ownership, outstanding evidence, target go-live date and closure status.
• Perform first-level completeness checks of go-live artefacts before submission to the Board’s Cybersecurity team. Artefacts may include the BIA, Risk Assessment, final system architecture, IT asset inventory, hardening evidence, VA/PT/SCR reports where applicable, System Security Plan, security logging and monitoring onboarding, backup/DR evidence, and cloud security monitoring evidence.
• Check that cybersecurity assessment reports and supporting evidence are the latest submitted versions and clearly identify unresolved findings, deviations or risk-treatment items requiring further review.
• Coordinate with System OICs, infrastructure teams, application vendors and IT Security Officers to close outstanding go-live prerequisites and maintain evidence of follow-up.
• Track pre-go-live and post-go-live actions and verify that temporary access, troubleshooting rules and elevated privileges identified for removal or downgrade are followed up.
• Prepare a consolidated readiness status for PUB Cybersecurity review and accelerate blockers or overdue items that may affect planned go‑live.

Azure / Cloud Access and RBAC Administration

• Process approved cloud access and role‑assignment requests in accordance with the Board’s access control process and applicable segregation‑of‑duties requirements.
• Support assignment, modification and removal of approved Azure role‑based access control (RBAC) permissions and relevant cybersecurity administration groups, based on authorised Service Requests or approvals.
• Maintain auditable records of access assignments, changes, removals and supporting approvals.
• Perform periodic checks and go‑live/post‑go‑live follow‑up for temporary or elevated cloud access, including removal or downgrade when no longer required.
• Escalate unclear, excessive, conflicting or unsupported access requests to PUB Cybersecurity before implementation.
• Support user access administration activities where assigned, while observing segregation of duties between request, approval and access administration.

CSPM, CloudSCAPE and Cloud Security Compliance Operations

• Monitor and review Cloud Security Posture Management (