Cybersecurity Architect

Crédit Agricole CIB; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Crédit Agricole CIB in Singapore seeks a senior Cyber Security Architect to plan, design, test, implement, and maintain our network security infrastructure. You will assess vulnerabilities, participate in penetration tests, and improve the security of LANs, WANs, VPNs, routers, and firewalls.

The role requires leading security initiatives, crafting security policies, and providing guidance to security teams.

Qualifications

• Experience designing and implementing secure network architectures.
• Ability to lead security initiatives and policy development.
• Familiarity with incident response and threat analysis.

Responsibilities

• Design, develop, and implement secure system architectures.
• Embed security principles into system designs to mitigate risks.
• Create design artefacts describing security principles within enterprise architecture.
• Review infrastructure security and maintain security documentation.
• Understand the organization’s technology and information systems.
• Plan and design reliable security architectures for IT projects.
• Define and maintain corporate security policies and ensure employee compliance.
• Specify requirements for routers, firewalls, VPNs, and related devices.
• Review and approve security infrastructure installations.
• Prepare cost estimates for cybersecurity measures.
• Provide guidance for security teams.
• Lead security awareness programs.
• Respond to security incidents promptly.
• Upgrade security systems as needed.
• Provide Production Level 3 escalation support for Network and Security infra.

Job description

Summary of the position

The Cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization’s systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.

Main responsibilities

• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed
• Production Level 3 escalation support for Network and Security infrastructure.

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain