Cybersecurity Lead (Security Architecture & Threat Management)

Raffles Medical Group; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Raffles Medical Group is seeking an Experienced Cybersecurity Lead to strengthen its security architecture and threat management capabilities. You will drive architecture standards, security-by-design principles and governance across the organisation, collaborating with technology teams and business units.

You will lead threat intel and vulnerability management, coordinate penetration testing, and ensure compliance with regulatory requirements while guiding security design for cloud and

Qualifications

• Bachelor's degree in cybersecurity or related discipline.
• 6+ years hands-on cybersecurity experience, including at least 3 years in architecture/design within complex IT environments.
• Experience designing and evaluating security controls across cloud and on-premise.
• Knowledge of NIST CSF, ISO 27001 and CIS Controls.
• One senior-level cybersecurity certification such as CISSP, CISM or CISA, or equivalent.
• Knowledge of security architecture across AWS, Azure or Google Cloud.

Responsibilities

• Evaluate systems and solutions from a cybersecurity architecture perspective and recommend security measures.
• Develop and implement cybersecurity architecture standards, guidelines and security design requirements.
• Review solution architectures and provide security guidance for cloud and major technology initiatives.
• Conduct architectural risk assessments and security design reviews.
• Advise project/engineering teams on system hardening, network segmentation, identity security and application security.
• Lead cybersecurity assessments and architecture-related security improvement initiatives.
• Monitor architecture compliance and coordinate remediation of identified security gaps.
• Lead threat intelligence and vulnerability management activities, including remediation tracking and reporting.
• Support cybersecurity incident response planning, exercises and post-incident reviews.
• Coordinate penetration testing activities and track remediation of findings.
• Maintain cyber risk, threat and attack-surface information.
• Support cybersecurity compliance, audits, assessments and regulatory requirements.
• Work with vendors and partners to ensure security solutions meet regulatory requirements.

Skills

Cybersecurity

Security architecture

Threat management

Governance

Cloud security

Stakeholder management

Education

Bachelor's degree in cybersecurity

Job description

About the Role:
We are looking for an experienced Cybersecurity Lead (Security Architecture & Threat Management) to strengthen our cybersecurity architecture and organisational resilience.

The role will be responsible for driving cybersecurity architecture standards, security-by-design principles, architecture governance and threat and vulnerability management across the organisation. You will work closely with technology teams, business units and key stakeholders to ensure cybersecurity requirements are effectively incorporated into technology solutions and transformation initiatives.

Key Responsibilities:

• Evaluate systems and solutions from a cybersecurity architecture perspective and recommend appropriate security measures.
• Develop and implement cybersecurity architecture standards, guidelines and security design requirements.
• Review solution architectures and provide security guidance for new systems, platforms, cloud solutions and major technology initiatives.
• Conduct architectural risk assessments, security design reviews and solution validation.
• Advise project, architecture and engineering teams on areas including system hardening, network segmentation, identity security, cloud security and application security.
• Lead cybersecurity assessments and architecture-related security improvement initiatives.
• Monitor architecture compliance and coordinate remediation of identified security gaps.
• Lead threat intelligence and vulnerability management activities, including vulnerability prioritisation, remediation tracking and reporting.
• Support cybersecurity incident response planning, exercises and post-incident reviews.
• Coordinate penetration testing activities and track remediation of identified findings.
• Maintain relevant cyber risk, threat and attack-surface information.
• Support cybersecurity compliance, audits, assessments and regulatory requirements.
• Work closely with internal stakeholders, vendors and partners to ensure security solutions meet organisational and regulatory requirements.

Requirements:

• Bachelor's Degree in Cybersecurity or a related discipline.
• Minimum 6 years of hands-on cybersecurity experience, including at least 3 years in cybersecurity architecture or security design within complex IT environments.
• Strong experience in enterprise security architecture, security design reviews and governance.
• Experience designing and evaluating security controls across cloud and on-premise environments.
• Good understanding of cybersecurity frameworks such as NIST CSF, ISO 27001 and CIS Controls.
• Experience in threat and vulnerability management.
• At least one recognised senior-level cybersecurity certification such as CISSP, CISM or CISA, or equivalent.
• Knowledge of cloud security architecture across AWS, Azure or Google Cloud environments.
• Strong stakeholder management and communication skills, with the ability to communicate cybersecurity risks to both technical and non-technical stakeholders.
• Experience in healthcare, government or Critical Information Infrastructure environments would be advantageous.
• Proficiency in Chinese would be advantageous as the role may support engagements in China.