Lead, Cloud Security COE

Singapore Telecommunications; Singapore; On-site; SGD 100,000 - 150,000; Full time

Job summary

A leading telecommunications company in Singapore seeks a Cloud Security Lead to manage cloud security risks and drive compliance across multiple cloud service providers. Candidates should possess a Bachelor’s degree in Cybersecurity and at least 8 years of experience in the field. Professional certifications are preferred. This role offers the opportunity to work collaboratively with various stakeholders and innovate in cloud security strategies.

Qualifications

• At least 8 years of experience in Cybersecurity risk assessment.
• Hands-on experience in cloud architecture and cybersecurity technologies required.
• Professional certifications are preferred.

Responsibilities

• Drive governance for cloud security compliance and risk management.
• Advise on cloud security technology stacks and support operations.
• Engage with stakeholders and provide security education.

Skills

Cybersecurity risk assessment

Cloud security technology

Application/network vulnerability assessment

Threat modeling

Security incident handling

Education

Bachelor degree in Cybersecurity or equivalent

Tools

CISSP certification

CISM certification

AWS Cloud certification

Azure Cloud certification

Job description

At Singtel, we believe in the strength of a vibrant, diverse and inclusive workforce where backgrounds, perspectives and life experiences of our people help us innovate and create strong connections with our customers. We strive to ensure all our people practices are non-discriminatory and provide a fair, performance-based work culture that is diverse, inclusive and collaborative.

Join us and experience what it’s like to be with an Employer of Choice*. Together, let’s create a brighter digital future for all. *Awarded at the HR Fest Awards 2020.

Be a Part of Something BIG!

This role will report to the Director of Cloud Security COE and is expected to lead in cloud security standards and best practices, advocate cloud security reference architectures, drive compliance and security monitoring, and engage stakeholders and partners to improve the cloud security posture in Singtel. As Singtel has subscribed to multiple cloud service providers, functional leadership is needed to manage cloud security risks and identify/maintain cost-effective security solutions to monitor and remediate cybersecurity risks. This role will also advocate alignment of cloud security technologies/solutions and processes across different BUs within Singtel SG and if needed, support similar efforts across OpCos and affiliates.

Make an Impact by:

• Drive governance oversight and processes for cloud security compliance, best practices and risk management.
• Provide cloud security advisory, design, engineering (including automation) and ops support for cloud security technology stacks.
• Guide stakeholders during security escalation/incidents in the clouds and educate stakeholders on cloud security awareness and management reporting.
• Support management reporting cloud security risks, remediation plans, and security metrics.
• Drive cost-effective and streamlined operation of in-scope cloud security technology stacks.
• Engage with multiple E level stakeholders (e.g., Enterprise Architecture, Enterprise Platform, TI, Consumer Business, Enterprise Business, Enterprise IT, Corp Systems etc) having varied set of cloud security awareness, business considerations, priorities and risks.
• Keep abreast with new emerging cybersecurity/cloud trends, risks and incidents, and regulatory requirements affecting Singtel.
• Regularly review and learn from historical events, outside-in lessons and thematic analysis, and drive improvement plans. Consistently look forward and be proactive in identifying improvements to futureproof existing cloud security controls

Skills for Success:

• Bachelor degree in Cybersecurity, Information Security, Computer Science or equivalent technical degree.
• Professional certifications like CISSP, CISM, CISA, CCSP, CRISC, GCIH or OSCP will be preferred.
• At least 8 Years or more Cybersecurity risk assessment and risk reduction initiatives.
• Application, infrastructure, cloud and cybersecurity technologies including CNAPP, DevSecOps, containers.
• Application/network vulnerability assessment and validation.
• Regulatory requirements, security standards, and best practices pertaining to cybersecurity and cloud risk management.
• MITRE frameworks, threat modelling, assessment, and hunting.
• Security operations, especially security incident handling.
• Cloud architecture, design, implementation, and operation.
• Hands-on experience in system integrations and any of the abovementioned requirements will be preferred.
• CSP-specific professional certifications from AWS, Azure, Google will also be advantageous.
• Project/Programme Management.
• Experience in conducting audit or assurance testing.
• Experience in conducting thematic analysis.

Are you ready to say hello to BIG Possibilities?

Take the leap with Singtel to unlock new opportunities and accelerate your growth. Apply now and start your empowering career!