Cybersecurity Team Lead Consultant

Sopra Steria; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Health & insurance

Annual bonus

Training & certifications

Team activities

Job summary

Sopra Steria in Singapore is seeking a skilled Team Lead for a government-focused cybersecurity engagement. You will lead risk assessments across on-premise and cloud (AWS/Azure), mentor teammates, and coordinate with clients.

Ideal candidates have 5–8 years in cybersecurity consulting, CISSP or equivalent, hands-on threat modelling and secure code reviews, and cloud security experience.

Qualifications

• Bachelor’s degree in Computer Science, IT, cybersecurity, or related field.
• CISSP, CISM, OSCP, CCSP, CISA or equivalent certifications strongly preferred.
• 5–8 years of cybersecurity consulting with leadership in risk assessment, cloud security, policy & compliance.
• Experience securing cloud environments (AWS, Azure, GCP) with native tools.
• Proven ability to lead multiple engagements and manage client relationships.

Responsibilities

• Lead and oversee security risk assessments across on-prem, cloud (AWS, Azure), DevOps, IoT, and third-party ecosystems.
• Drive and review complex vulnerability assessments, prioritization of risks, and mitigation strategies.
• Review enterprise security policies, standards, and procedures; ensure regulatory compliance.
• Guide and mentor in application security including secure code reviews, threat modelling, architecture reviews, and secure SDLC.
• Provide leadership in cloud security architecture reviews, IAM analysis, encryption, and hybrid cloud governance.
• Oversee System Security Acceptance Testing (SSAT) activities and define test strategies.
• Manage risk reports and executive summaries; ensure clear, actionable findings.
• Act as primary client and stakeholder contact ensuring timely delivery and quality.
• Provide thought leadership across six cybersecurity domains and stay updated on threats and tools.
• Coach and develop junior team members to strengthen the team.

Skills

Team leadership

Cybersecurity

Risk assessment

Cloud security

Threat modelling STRIDE/PASTA

Stakeholder engagement

Security testing in CI/CD

Secure SDLC

Security design

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

AWS

Azure

GCP

Job description

Company DescriptionSopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.

Company DescriptionSopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value. In Asia Pacific, Singapore serves as the regional headquarter for Sopra Steria’s Infrastructure, Cloud and Cybersecurity services.

Job Description Description:
For this project, we are forming a team of 6 (including 1 team lead) to assist in a huge government project to perform the following scope of works:

• Security Risk Assessment
• Security Policies, Standards, Guidelines, And Procedures Review
• Security Design
• Application Security
• Vulnerability assessment and
• System Security Acceptance Testing
• Cloud Security

We are seeking a highly skilled and experienced Team Lead to join our dynamic team. The ideal candidate will possess deep technical knowledge, strong leadership skills, and a proven track record in managing cybersecurity projects.
Responsibilities:

• Lead and oversee the execution of comprehensive security risk assessments across a wide range of environments, including on-premise, cloud (AWS, Azure), DevOps, IoT, and third-party ecosystems
• Drive and review complex vulnerability assessments, ensuring thorough analysis of findings, prioritization of risks, and development of actionable mitigation strategies
• Lead the review of enterprise security policies, standards, and procedures, ensuring alignment with organizational goals and compliance with regulatory frameworks (e.g., NIST, ISO 27001, CSA, MAS)
• Guide and mentor team members in application security activities including secure code reviews, threat modeling (e.g., STRIDE, PASTA), architecture reviews, and secure SDLC integration
• Provide technical leadership in cloud security architecture reviews, including cloud configuration audits, IAM analysis, encryption practices, and hybrid cloud governance
• Oversee System Security Acceptance Testing (SSAT) activities, define security test strategies, validate controls, and ensure secure integration of systems before go-live
• Manage the development and communication of risk reports and executive summaries, ensuring findings are clearly articulated, business-aligned, and actionable
• Act as the primary point of contact for clients and internal stakeholders, ensuring timely delivery of cybersecurity engagements, maintaining high quality and client satisfaction
• Provide thought leadership across all six cybersecurity domains and stay up to date with emerging threats, tools, and frameworks to continually improve the team's capabilities
• Coach, mentor, and develop junior team members, fostering a collaborative and technically strong team culture

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field
• Professional certifications such as CISSP, CISM, OSCP, CCSP, CISA, or equivalent are strongly preferred
• Minimum 5–8 years of experience in cybersecurity consulting with demonstrated leadership in risk assessment, application security, cloud security, policy & compliance, security by design, and vulnerability management
• Proven experience working in and securing cloud environments (AWS, Azure, GCP), with a solid understanding of native tools and best practices
• Strong hands-on experience in threat modelling methodologies (e.g., STRIDE, PASTA) and security testing in CI/CD environments
• Deep knowledge of relevant regulatory frameworks and standards (e.g., NIST 800-series, ISO27001, CIS Controls, MAS TRM)
• Demonstrated project and people leadership experience, with the ability to lead multiple engagements simultaneously
• Strong stakeholder engagement, client management, and executive communication skills
• Ability to think strategically, lead technically, and drive high-impact outcomes in dynamic environment

Additional Information

• Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
• Performance incentives: Annual bonus based on individual performance
• Learning & development: Training programs, certification opportunities, and training incentives to support career growth
• Team culture: Regular team-building activities and social events