Lead Security Officer

Sciente Consulting; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Sciente Consulting is seeking a Lead Security Officer (cloud security) to drive cybersecurity resilience, governance, operations, engineering and testing across on‑premises and cloud platforms. The role focuses on policy formulation, enforcement, and ecosystem development through close collaboration with internal and external teams.

The position requires 8+ years in information security, deep knowledge of governance frameworks, incident response and secure architecture, and leadership of

Qualifications

• Minimum 8+ years in information security and governance.
• Experience in on-prem and cloud security environments.
• Knowledge of cyber risk assessment and incident response.
• Security-by-design and DevSecOps practices.
• Familiarity with cloud models (IaaS, PaaS, SaaS) and serverless/container architectures.
• Strong stakeholder management and leadership experience.

Responsibilities

• Drive the organisation's cybersecurity strategy, policies, and governance.
• Lead security efforts supporting digital transformation and cyber resilience.
• Oversee risk assessments, mitigation plans, and regulatory compliance.
• Provide guidance on secure architecture and DevSecOps practices.
• Collaborate with internal teams and vendors to manage IT security operations.
• Lead incident response planning, exercises, and real-world incidents.
• Strengthen cloud and on-prem security aligned with government best practices.
• Promote secure-by-design principles across systems and product development.

Skills

Cybersecurity governance

Security operations management

Cloud and on-prem security

DevSecOps

Threat risk assessment

Executive stakeholder management

Security policy formulation

Education

Degree in Computer Science, Information Systems, Engineering, or related tech field

Tools

IaC tools

CI/CD security

Cloud security tooling

Job description

Job Summary

We are seeking a Lead Security Officer (cloud security) to drive cybersecurity resilience, governance, operations, engineering, and testing across both on-premises and major cloud platforms.

This role will ensure security is embedded and uplifted throughout the organization's digital transformation journey, with a strong focus on policy formulation, enforcement, and ecosystem development through close collaboration with internal and external teams.

Mandatory Skill-set

• Degree in Computer Science, Information Systems, Engineering, or related tech field;
• Must have more than 8 years above experience in information security, security policies, ICT operations, business processes including management experience;
• Having exposure and experience in cybersecurity governance frameworks, security operations including incident response, architecture design and threat risk assessment, and security testing;
• Must have experience in both on-prem and cloud security environments;
• Skilled in security-by-design, system architecture reviews, and DevSecOps practices;
• Proficient with Infrastructure as Code (IaC) tools and securing CI/CD pipelines;
• Deep understanding of cloud models (IaaS, PaaS, SaaS) and modern cloud-native architectures (e.g. serverless, containers, microservices);
• Able to identify and assess cybersecurity threats across on-prem and cloud environments;
• Experience in evaluating security controls and recommending mitigation strategies;
• Strong background in ICT operations, security policies, and business processes;
• Proven ability to lead multi-functional, cross-disciplinary teams;
• Knowledgeable in compliance requirements; able to identify violations in IT environments;.
• Strong interpersonal and executive stakeholder management skills

Desired Skill-set

• Relevant certifications (CISSP, CISM, CISA, GSEC).

Responsibilities

• Drive the organisation's overall cybersecurity strategy, policies, and governance;
• Lead cybersecurity efforts that support digital transformation while ensuring strong cyber resilience;
• Oversee risk assessments, mitigation plans, and compliance with national frameworks;
• Provide strategic and technical guidance on secure architecture, security technologies, and DevSecOps practices;
• Collaborate with internal teams and external vendors to manage IT security operations;
• Lead incident response planning, conduct exercises, and manage real-world cyber incidents;
• Strengthen cloud and on-premise security posture aligned with government best practices;
• Champion secure-by-design principles across systems and product development;
• Build and maintain cybersecurity awareness and training programs across the organizations.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639