Cybersecurity Architect

Crédit Agricole Group; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Crédit Agricole Group is seeking a senior Cyber Security Architect to plan, design, test, implement, and maintain our network security infrastructure. You will evaluate vulnerabilities and participate in penetration tests and risk analyses across LANs, WANs, and VPNs.

The role involves embedding security into system designs, creating security artefacts, conducting routine audits, and guiding security teams.

Qualifications

• Senior-level position responsible for planning, designing, testing, implementing and maintaining network security infrastructure.
• Experience with LANs, WANs, VPNs and security devices like routers and firewalls.
• Responsible for security policies, procedures, and awareness programs.

Responsibilities

• Design secure system architectures across enterprise environments.
• Embed security principles into system designs to mitigate risks from new tech and practices.
• Create design artefacts describing security principles within enterprise architecture.
• Perform audits and maintain security standards documentation.
• Gain comprehensive understanding of the organization’s tech and info systems.
• Plan and design robust, flexible security architectures for IT projects.
• Define and maintain corporate security policies and ensure compliance by all employees.
• Develop requirements for IT assets including routers, firewalls, LANs, WANs, VPNs.
• Review and approve installation of firewalls, VPNs, routers, servers, and IDS tools.
• Prepare cost estimates for cybersecurity measures and address integration issues.
• Provide technical guidance and supervision for security teams.
• Lead security awareness programs for non-IT personnel.
• Respond to security incidents (breaches, viruses, phishing) and upgrade systems as needed.
• Provide Level 3 escalation support for networking and security infrastructure.

Skills

Network security architecture

Security risk assessment

Incident response

Firewall management

VPN management

IDS management

Tools

Penetration testing

Job description

Summary of the position:

The Cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization's systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.

Main responsibilities:

• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed
• Production Level 3 escalation support for Network and Security infrastructure.

Legal and Regulatory Responsibilities:

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain