Cyber Security Architect

Talent Link by e2i; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Talent Link by e2i is seeking an experienced cybersecurity leader to own governance, incident response, and security operations for Town Councils and related environments. The role involves translating high-level security requirements into practical standards for IT Officers and vendors, and coordinating with external providers during major incidents.

You will develop and maintain incident runbooks, escalation paths, and governance artefacts, while supporting audits, tenders, and security

Qualifications

• Degree in cybersecurity, information security, CS, IT, or related discipline.
• 7–10 years of cybersecurity, governance, incident response or security operations experience.
• Hands-on experience translating policies into implementable controls across multi-site environments.
• Proven experience coordinating incidents with internal and external stakeholders/vendors.
• Experience in regulated or multi-stakeholder environments is highly desirable.
• Shows leadership & ownership for cyber posture and readiness.

Responsibilities

• Own and maintain baseline cybersecurity policies, standards and controls across Town Councils.
• Translate cybersecurity expectations into practical standards for IT Officers and vendors.
• Define and maintain governance artefacts for auditability.
• Provide guidance on cybersecurity requirements for IT tenders and vendor scopes.
• Coordinate incident response and act as escalation point for cybersecurity events.
• Lead incident triage, containment, and post-incident review with remediation recommendations.
• Coordinate with external incident response providers for major incidents.
• Advise on cybersecurity compliance, risk assessments, gap analyses and remediation planning.
• Support audits and governance queries with evidence and documentation.
• Coach IT Officers on baseline controls and awareness initiatives.
• Develop structured cybersecurity uplift across on-site staff via practical scenarios.
• Partner with IT Service Delivery Manager to operationalize policies through processes and escalation.

Skills

Cybersecurity governance

Incident response

Security operations

Policy development

Vendor management

Stakeholder communication

Leadership

Education

Bachelor's degree in Cybersecurity / Information Security / Computer Science

Tools

SIEM

Security monitoring tools

Job description

Talent Link by e2i is a programme to match candidates to job opportunities offered by e2i’s Industry Partners. Applicable for Singaporeans and Singapore Permanent Residents only.

This job opportunity is from our Industry Partner in the Facilities Management sector.

Job Descriptions

• Own and maintain baseline cybersecurity policies, standards and minimum security controls applicable across Town Councils (and Group where applicable).
• Translate cybersecurity expectations into practical standards that can be implemented by IT Officers and vendors across varying Town Council environments.
• Define and maintain cybersecurity governance artefacts (e.g., control checklists, compliance reporting templates) to support consistent implementation and auditability.
• Provide guidance on cybersecurity requirements that can be embedded into IT tenders and vendor scopes (e.g., incident response obligations, security monitoring expectations, baseline configurations).
• Coordinate incident response protocols and act as the escalation point for cybersecurity events affecting EM & Town Councils related operations.
• Establish and maintain incident response runbooks, escalation paths and communications templates (internal and stakeholder-facing), aligned to vendor operating models.
• Lead cybersecurity incident triage, containment coordination, and post-incident review, including recommendations for remediation and prevention of recurrence.
• Coordinate with external incident response providers (retainer service) to ensure timely mobilisation, clear handover, and effective delivery during major incidents.
• Advise on cybersecurity compliance expectations, including risk assessments, gap analysis, and remediation planning. Maintain a consolidated view of cybersecurity risks and recurring control gaps across Town Councils to inform prioritisation and uplift planning.
• Support Town Councils and IT Officers in preparing evidence and responding to cybersecurity audits, reviews, and governance queries.
• Support IT Officers in implementing security controls and conducting awareness initiatives, including coaching and technical guidance on baseline controls (e.g., identity security, endpoint hygiene, access governance, incident reporting discipline).
• Define a structured approach for cybersecurity awareness and uplift across on-site colleagues, leveraging practical scenarios and recurring lessons from incidents.
• Partner with the IT Service Delivery Manager to ensure cybersecurity policies are operationalised through standard service processes, ticketing, change discipline, and escalation governance.
• Liaise with vendors to ensure alignment on cybersecurity expectations, reporting, and incident coordination.
• Participate in vendor governance on cybersecurity-related matters, ensuring vendors understand and meet required security baselines and incident response obligations.
• Provide cybersecurity input into service reviews, tender specifications, and scope discussions where cyber responsibilities and boundaries require clarification.
• Where applicable, lead or co-lead EMHQ cybersecurity programme planning, including group-level governance, awareness, incident readiness, and capability development.
• Build and mature cybersecurity operating rhythms (e.g., quarterly posture reviews, incident simulations/tabletop exercises, periodic control uplift campaigns) to improve resilience over time.

Job Requirements

• Degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related discipline.
• 7–10 years of experience in cybersecurity, cyber governance, incident response, or security operations, including ownership of security programmes, cybersecurity awareness initiatives and incident coordination.
• Hands-on experience developing security policies/standards and translating them into implementable controls across multi-site or multi-entity environments.
• Proven experience coordinating cybersecurity incidents with internal stakeholders and external service providers/vendors.
• Experience operating in regulated, public-facing, or multi-stakeholder environments is highly desirable.
• Cybersecurity Leadership & Ownership – Takes accountability for cyber posture, readiness, and outcomes.
• Governance & Structure – Able to define standards, controls, evidence and assurance processes across multiple entities.
• Incident Command & Calm Execution – Able to lead triage, escalation, and coordination under pressure.
• Stakeholder & Vendor Management – Effective communicator across Town Councils, vendors, and coordinating stakeholders.
• Pragmatism & Risk-Based Judgement – Balances “ideal security” with operational realities and prioritisation.
• Enablement Mindset – Coaches IT Officers and operational teams to implement controls consistently