Lead Security Architect - Enterprise

MORGAN MCKINLEY PTE. LTD.; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

MORGAN MCKINLEY PTE. LTD. seeks a Lead Security Architect to drive secure-by-design architecture across enterprise infrastructure, cloud, applications, identity platforms and emerging technologies.

The role shapes security strategy, providing technical leadership across domains including network, cloud, IAM, app security and AI security. Responsibilities include leading architecture reviews, defining standards, conducting threat modelling and collaborating with engineering to embed security

Qualifications

• 8+ years in cybersecurity with security architecture/enterprise security engineering experience.
• Strong foundation across infrastructure, network, cloud, IAM, application or data security.
• Experience designing or reviewing security architectures in complex environments.

Responsibilities

• Lead security architecture reviews and provide technical guidance across enterprise IT infrastructure, networks, cloud platforms and applications.
• Define secure-by-design principles, security standards and reference architectures aligned with policy.
• Assess risks and recommend controls for new tech initiatives and digital transformations.
• Collaborate with engineering, cloud, and business teams to embed security throughout the lifecycle.
• Evaluate new security technologies and review vendor architectures for compliance.
• Support governance and alignment with NIST, ISO 27001 and Zero Trust principles.

Skills

Security architecture

Threat modelling

Cloud security

IAM/PAM

DevSecOps

Zero Trust

Encryption

Automation

Stakeholder management

Education

CISSP

CCSP

TOGAF

Tools

AWS

Azure

GCP

Job description

Lead Security Architect - Enterprise

Are you an experienced Security Architect passionate about securing complex technology environments and shaping the future of cybersecurity? We are seeking a Lead Security Architect to drive secure-by-design architecture across enterprise infrastructure, cloud, applications, identity platforms and emerging technologies. This is an exciting opportunity to work at the intersection of cybersecurity, technology transformation and innovation, helping a large, complex organisation adopt new technologies securely while strengthening its overall security architecture.

Key Responsibilities

• Lead security architecture reviews and provide technical guidance across enterprise IT infrastructure, networks, cloud platforms, applications and emerging technologies.
• Define and implement secure-by-design principles, security architecture standards and reference architectures aligned with enterprise security policies.
• Assess security risks and recommend appropriate controls for new technology initiatives, digital transformation programmes and solution designs.
• Provide security architecture expertise across key domains, including:
  • Infrastructure & Network Security: Zero Trust, network segmentation, endpoint protection, secure connectivity and hybrid infrastructure.
  • Cloud Security: AWS, Azure and GCP security architecture, cloud-native controls, workload protection and DevSecOps.
  • Identity & Access Management: IAM, PAM, authentication, authorisation, federation and identity governance.
  • Application & Data Security: Secure SDLC, API security, encryption, data protection and vulnerability management.
  • AI & Emerging Technology Security: Security architecture for AI/ML platforms, Generative AI, LLMs, autonomous AI agents and emerging technology ecosystems.
• Conduct security architecture assessments, threat modelling and technical risk reviews to identify vulnerabilities and recommend practical mitigation strategies.
• Collaborate with engineering, infrastructure, cloud, application development, AI and business teams to embed security throughout the technology lifecycle.
• Evaluate new security technologies, tools and solutions to strengthen enterprise security capabilities.
• Review third-party technology solutions and vendor architectures to ensure alignment with security requirements.
• Support security governance, regulatory compliance and alignment with industry frameworks such as NIST, ISO 27001 and Zero Trust principles.
• Provide technical leadership and guidance to stakeholders, translating complex security risks into practical architecture recommendations.

Requirements

• 8+ years of experience in cybersecurity , with substantial experience in security architecture, solution security design or enterprise security engineering.
• Strong technical foundation across multiple security domains, such as infrastructure, network, cloud, IAM, application or data security.
• Experience designing, reviewing or implementing security architectures in complex enterprise environments.
• Good understanding of security technologies and architectural controls, including Zero Trust, network segmentation, IAM/PAM, encryption and cloud security.
• Experience conducting security assessments, threat modelling and architecture risk reviews.
• Exposure to emerging technologies such as AI/ML, Generative AI, automation, quantum computing or post-quantum cryptography would be advantageous.
• Familiarity with cybersecurity frameworks and standards such as NIST, ISO 27001, CIS Controls and OWASP.
• Strong communication and stakeholder management skills, with the ability to engage architects, engineers, technology leaders and business stakeholders.
• Ability to balance security requirements with business innovation, scalability and operational needs.
• Knowledge of AI security risks, including prompt injection, model misuse, data leakage and AI-agent security.
• Exposure to post-quantum cryptography, cryptographic migration or quantum-readiness assessments.
• Experience with DevSecOps, cloud-native security, container security or security automation.
• Relevant certifications such as CISSP, CCSP, SABSA, TOGAF or cloud security certifications.