Cybersecurity Architecture Owner

HOYA HOLDINGS ASIA PACIFIC PTE LTD; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

A global technology and med-tech company is seeking an experienced Enterprise Cybersecurity Architecture Owner in Singapore. This strategic role involves defining and governing the enterprise security blueprint to embed cybersecurity requirements across the organization. Candidates should have a Bachelor's degree in Cybersecurity or a related field, along with relevant certifications. Strong skills in influencing senior stakeholders and operating across strategy and risk domains are required. Join us to ensure a robust security posture while enabling efficient technology solutions.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• Certifications like CISSP, CISM, SABSA, or TOGAF are highly desirable.
• Proven experience in enterprise cybersecurity architecture.

Responsibilities

• Define and govern the enterprise security blueprint and standards.
• Lead risk-based security architecture reviews for high-impact initiatives.
• Collaborate with cross-functional teams to ensure compliance with security requirements.

Skills

Deep experience in cybersecurity architecture

Strong influencing skills

Ability to operate across strategy, risk, and technology

Education

Bachelor's degree in Cybersecurity or related field

Certifications such as CISSP, CISM, SABSA, or TOGAF

Job description

The Company

HOYA Group: Founded in 1941 in Tokyo, Japan, HOYA Corporation is a global technology and med-tech company and a leading supplier of innovative high-tech and medical products. HOYA’s divisions and business units research and develop products utilized in the healthcare and information technology fields. In the healthcare field, we provide medical device products such as eyeglasses, medical endoscopes, contact and intraocular lenses, orthopedic implants, surgical/therapeutic devices and medical device reprocessing and disinfection solutions. In the information technology field, we provide products such as optical lenses, photomasks and blanks used in the manufacturing process for semiconductor and LCD/OLED devices, text-to-speech, human resources and other software solutions and critical components for the mass memory and cloud storage industries. With over 150 offices and subsidiaries worldwide, HOYA currently employs a multinational workforce of 37,000 people.

The Position

The Enterprise Cybersecurity Architecture Owner is a senior strategic role responsible for defining and governing the enterprise security blueprint. This role ensures that cybersecurity requirements are embedded consistently across the organization while enabling technology teams to deliver solutions efficiently and safely. The position is based in Singapore and reports to the Group CISO.

This role is not responsible for designing or implementing individual solutions. Instead, it establishes the architectural guardrails within which technology owners and delivery teams operate. The function can be compared to city planning, where zoning laws, building codes, and infrastructure standards are defined centrally, while individual builders design and construct buildings that comply with those rules.

Architecture Definition and Standards

• Define security principles, requirements, standards, and reference architectures guiding technology design across cloud, identity, data, network, platform, and operational technology environments
• Derive architectural artifacts from enterprise security policies, risk appetite, and control objectives
• Create reusable blueprints for consistent application across initiatives
• Maintain approved security patterns and define standard approaches for common architectural scenarios

Framework Ownership and Governance

• Own the enterprise security architecture framework
• Ensure framework alignment with evolving business priorities, risk landscapes, and regulatory expectations
• Articulate security requirements clearly early in the lifecycle of major initiatives

Architecture Reviews and Risk Management

• Lead and govern risk-based security architecture reviews for high-impact or high-risk initiatives
• Conduct advisory reviews focused on ensuring alignment with enterprise guardrails rather than redesigning solutions
• Manage exception and waiver processes for deviations from standards, ensuring decisions are risk-informed, time-bound, and properly documented

Cross-Functional Collaboration

• Partner with cyber defense function to ensure detection, response, and resilience requirements are reflected in architecture standards
• Collaborate with risk and policy functions to translate control objectives into practical architectural guidance
• Work with technology and digital teams to ensure guardrails are pragmatic and enable delivery

Role Boundaries and Accountabilities

• Does not act as a solution architect or select/configure tools
• Does not own delivery or operational outcomes
• Technology owners and delivery teams retain accountability for solution design, implementation, and day-to-day operations
• Technology owners own operational risk of systems that conform to the established architectural blueprint

Key Deliverables

Success in this role will be measured by clearer security expectations, fewer late-stage security issues, faster delivery through reuse of approved patterns, improved alignment between security and technology teams, and a consistent security posture across the enterprise.

Qualifications

Education/Training Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• Certifications such as CISSP, CISM, SABSA, or TOGAF (with security focus) are highly desirable.

Experience

• Successful candidates will bring deep experience in cybersecurity architecture at an enterprise or group level, with a strong ability to operate across strategy, risk, and technology domains.
• Strong influencing skills to senior stakeholders, balancing risk and delivery tradeoffs, and enabling large organizations to scale security through clarity and consistency rather than control by exception.