Security Architecture Lead, FSI Environment

Argyll Scott; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

Argyll Scott Asia is representing a client in the financial services industry seeking a Security Architecture Lead who reports to the CISO. You will define, govern, and drive the enterprise security architecture strategy to align with business objectives and technology transformation.

You will lead architecture oversight, risk assessments, and security-by-design guidance across programs, promoting Zero Trust, Defense-in-Depth, and security automation to strengthen cyber resilience.

Qualifications

• Experience defining and governing enterprise security architecture strategies.
• Proven ability to drive security by design across large programmes.
• Strong collaboration with risk, compliance, and technology teams.
• Experience with cloud adoption, digital transformation and AI security is a plus.

Responsibilities

• Define and maintain enterprise security architecture strategy, principles, standards, and target-state roadmaps.
• Provide architecture oversight, risk assessments, and security-by-design guidance across enterprise programmes.
• Drive security governance, risk management, and regulatory compliance across initiatives.
• Lead security testing, architecture reviews, and secure development practices across the SDLC.

Skills

Enterprise Security Architecture

Zero Trust Architecture

Security Governance

Cloud Security

DevSecOps

Threat & Vulnerability Management

Regulatory Compliance

Cybersecurity Strategy

Identity & Access Management

Job description

Our client in the financial services industry is looking for a Security Architecture Lead, this role reports to a CISO. The Security Architecture Lead is responsible for defining, governing, and driving the enterprise security architecture strategy - ensuring cybersecurity capabilities align with business objectives, technology transformation initiatives, and organisational risk appetite. This role establishes security architecture standards, reference architectures, and governance frameworks that enable the secure adoption of cloud, digital, and emerging technology platforms.

Acting as the principal security advisor for strategic initiatives, the Security Architecture Lead provides architecture oversight, technology risk assessments, and security-by-design guidance across enterprise programmes - driving the adoption of Zero Trust, Defense-in-Depth, and security automation capabilities to strengthen organisational resilience and cyber risk management.

Key Responsibilities

Enterprise Security Architecture

• Define and maintain enterprise security architecture strategy, principles, standards, and target-state roadmaps.
• Develop security reference architectures and reusable security patterns for business and technology initiatives.
• Ensure security architecture aligns with organisational risk management frameworks, regulatory requirements, and strategic objectives.
• Provide security architecture leadership for digital transformation, cloud adoption, modernisation, and emerging technology programmes.

Security Governance & Risk Management

• Conduct architecture reviews and technology risk assessments for enterprise projects and platforms.
• Identify security risks and recommend mitigating controls throughout the project lifecycle.
• Establish and maintain security standards, policies, controls, and governance frameworks.
• Partner with business, technology, risk, and compliance stakeholders to ensure effective risk management and regulatory compliance.
• Design and govern security architectures for cloud, infrastructure, network, endpoint, and identity platforms.
• Define security control baselines, hardening standards, and compliance requirements for enterprise environments.
• Evaluate security technologies and recommend solutions that enhance organisational security posture and operational effectiveness.
• Ensure secure integration of on-premises, cloud, and hybrid technology environments.

Application Security & DevSecOps

• Review application and solution architectures for compliance with secure design principles.
• Drive Security-by-Design practices across software development and digital transformation initiatives.
• Establish and promote secure development standards, DevSecOps capabilities, and application security controls.
• Oversee security testing, vulnerability management, and remediation activities across the software development lifecycle.

Security Innovation & Emerging Technologies

• Evaluate emerging technologies and security trends to identify opportunities and risks.
• Develop security architecture requirements and governance frameworks for AI, automation, and digital innovation initiatives.
• Promote adoption of modern security models, including Zero Trust Architecture and security automation.
• Enterprise security roadmaps and reference architectures
• Security architecture standards and governance frameworks
• Technology risk assessments and architecture design reviews
• Cloud and application security architectures
• DevSecOps frameworks and secure development standards
• Security control baselines and hardening standards
• AI and emerging technology security governance frameworks

Core Competencies

Enterprise Security Architecture · Cybersecurity Strategy · Security Governance · Technology Risk Management · Cloud Security · Application Security · DevSecOps · Infrastructure & Network Security · Zero Trust Architecture · Defense-in-Depth · Threat & Vulnerability Management · Security Automation · Identity & Access Management · Regulatory Compliance · AI Security & Emerging Technologies

Argyll Scott Asia is acting as an Employment Agency in relation to this vacancy.