Cybersecurity Lead (Security Architecture & Threat Management)

raffles medical group ltd; Singapore; On-site; SGD 140,000 - 210,000; Full time

Job summary

Raffles Medical Group Ltd is seeking an experienced Cybersecurity Lead (Security Architecture & Threat Management) to strengthen the organisation's cybersecurity architecture and resilience. The role requires driving architecture standards, security-by-design principles, and governance across technology initiatives.

You will work with technology teams and stakeholders to ensure cybersecurity requirements are embedded in solutions, while leading threat and vulnerability management and incident

Qualifications

• Bachelor's degree in Cybersecurity or related discipline.
• 6 years hands-on cybersecurity experience, including 3 years in architecture or security design.
• Experience in enterprise security architecture, governance and design reviews.
• Experience designing security controls for cloud and on-premise environments.
• Knowledge of NIST CSF, ISO 27001 and CIS Controls.
• Senior-level certifications such as CISSP, CISM or CISA.

Responsibilities

• Evaluate systems from a cybersecurity architecture perspective and recommend security measures.
• Develop and enforce cybersecurity architecture standards and guidelines.
• Review architectures and provide security guidance for cloud and on-premise solutions.
• Conduct risk assessments, design reviews and solution validation.
• Lead threat intelligence and vulnerability management activities; track remediation.

Skills

Cybersecurity architecture

Security design reviews

Governance

Cloud security

Threat & vulnerability management

Stakeholder management

Education

Bachelor's Degree in Cybersecurity or related discipline

Tools

AWS

Azure

GCP

NIST CSF

Job description

About the Role:

We are looking for an experienced Cybersecurity Lead (Security Architecture & Threat Management) to strengthen our cybersecurity architecture and organisational resilience.

The role will be responsible for driving cybersecurity architecture standards, security-by-design principles, architecture governance and threat and vulnerability management across the organisation. You will work closely with technology teams, business units and key stakeholders to ensure cybersecurity requirements are effectively incorporated into technology solutions and transformation initiatives.

Key Responsibilities:

• Evaluate systems and solutions from a cybersecurity architecture perspective and recommend appropriate security measures.

• Develop and implement cybersecurity architecture standards, guidelines and security design requirements.
• Review solution architectures and provide security guidance for new systems, platforms, cloud solutions and major technology initiatives.
• Conduct architectural risk assessments, security design reviews and solution validation.
• Advise project, architecture and engineering teams on areas including system hardening, network segmentation, identity security, cloud security and application security.
• Lead cybersecurity assessments and architecture-related security improvement initiatives.
• Monitor architecture compliance and coordinate remediation of identified security gaps.
• Lead threat intelligence and vulnerability management activities, including vulnerability prioritisation, remediation tracking and reporting.
• Support cybersecurity incident response planning, exercises and post-incident reviews.
• Coordinate penetration testing activities and track remediation of identified findings.
• Maintain relevant cyber risk, threat and attack-surface information.
• Support cybersecurity compliance, audits, assessments and regulatory requirements.
• Work closely with internal stakeholders, vendors and partners to ensure security solutions meet organisational and regulatory requirements.

Requirements:

• Bachelor's Degree in Cybersecurity or a related discipline.
• Minimum 6 years of hands-on cybersecurity experience, including at least 3 years in cybersecurity architecture or security design within complex IT environments.
• Strong experience in enterprise security architecture, security design reviews and governance.
• Experience designing and evaluating security controls across cloud and on-premise environments.
• Good understanding of cybersecurity frameworks such as NIST CSF, ISO 27001 and CIS Controls.
• Experience in threat and vulnerability management.
• At least one recognised senior-level cybersecurity certification such as CISSP, CISM or CISA, or equivalent.
• Knowledge of cloud security architecture across AWS, Azure or Google Cloud environments.
• Strong stakeholder management and communication skills, with the ability to communicate cybersecurity risks to both technical and non-technical stakeholders.
• Experience in healthcare, government or Critical Information Infrastructure environments would be advantageous.
• Proficiency in Chinese would be advantageous as the role may support engagements in China.