IT Security Lead: Government-Grade Security & Compliance

maestro human resource pte. ltd.; Singapore; On-site; SGD 180,000 - 230,000; Full time

Benefits offered by this job

5-day work week

On-site in AMK area

Job summary

maestro human resource pte. ltd. seeks an IT Security Lead to manage end-to-end governance, compliance, and operations for mission-critical systems. You'll collaborate with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities cover secure design, threat modeling, risk assessment, and securing CI/CD pipelines with DevSecOps practices, incident response, and audits. Strong Singapore govt security experience is required.

Qualifications

• Minimum 8–12 years IT experience withat least 5 years as Security Lead or Architect.
• Proven experience in Singapore Government IT projects and IM8/government security compliance.
• Hands-on experience with Kubernetes/Docker security, API security, IAM, and security tools (SAST/DAST/SIEM) integrated with CI/CD.

Responsibilities

• Day 1 – Define and implement system security architecture aligned with Singapore Government policies.
• Review designs for security compliance across application, middleware, infrastructure and platform.
• Conduct threat modeling and risk assessments with mitigating controls.
• Translate policy requirements into actionable technical controls across tech stacks.
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable.
• Establish and oversee cybersecurity governance across infrastructure, applications and projects.
• Prepare and maintain Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports and baselines.
• Partner with software teams to enforce secure coding standards and DevSecOps practices.
• Integrate and govern SAST/DAST, SCA scanning, and container image scanning in CI/CD pipelines.
• Review and triage security findings; drive remediation and risk acceptance decisions.
• Provide guidance on API security, token/secret management, and secure service-to-service communication.
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors.
• Track remediation progress to closure and document residual risks and risk acceptance.
• Support security clearances and go-live certifications.
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting and authentication configurations.

Skills

Kubernetes security

Docker security

API security

IAM

CI/CD security

Security governance

Education

CS/InfoSec degree

Tools

SAST/DAST tools

CI/CD security tooling

Job description

maestro human resource pte. ltd. seeks an IT Security Lead to manage end-to-end governance, compliance, and operations for mission-critical systems. You'll collaborate with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities cover secure design, threat modeling, risk assessment, and securing CI/CD pipelines with DevSecOps practices, incident response, and audits. Strong Singapore govt security experience is required.