Security Lead

Liquid Group Pte Ltd; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading FinTech payments services group is seeking a Cybersecurity professional based in Singapore. You will be responsible for designing and implementing security policies, managing compliance with regulations, and integrating security within DevOps practices. The ideal candidate should have a strong background in cybersecurity, ideally in the financial sector, along with excellent analytical and communication skills. Competitive compensation and a collaborative work environment are offered.

Qualifications

• 5–8 years of experience in cybersecurity, with 2+ years in a lead or senior role.
• Experience in FinTech or financial services preferred.
• Professional certifications: CISSP, CISM, CEH, or equivalent.

Responsibilities

• Design, implement, and maintain information security policies.
• Monitor threats, vulnerabilities, and risks.
• Conduct incident response planning and tabletop exercises.
• Drive security training and awareness across the company.
• Evaluate and manage third-party security vendors.

Skills

Cybersecurity experience

Problem-solving

Communication skills

Analytical skills

Education

Bachelor’s degree in Cybersecurity, Information Technology, or related field

Tools

AWS

SIEM

Job description

Who is Liquid Group?

Liquid Group is a FinTech payments services group based in Singapore. Liquid empowers and connects businesses and individuals to make transactions in a smart, secure and cost-effective way, anywhere in the world.

We operate a regional payment network to enable cross-border QR payment services for e-wallet operators, banks, and merchants. We also provide white-label solutions to accelerate the development and adoption of mobile payments for our business partners.

We work in a collaborative and adaptive way, exploring innovative ideas and solving challenging problems to develop our products. Together, we ensure efficiency, security, and convenience for our partners and customers.

Website: www.liquidgroup.sg

Key Responsibilities

Cybersecurity Strategy & Operations

• Design, implement, and maintain information security policies, standards, and controls.
• Monitor internal and external threats, vulnerabilities, and risks. Lead response and remediation efforts.
• Lead incident response planning and conduct tabletop exercises.
• Develop and maintain threat models and security monitoring processes.
• Oversee implementation of endpoint protection, intrusion detection/prevention, SIEM, and DLP solutions.

Compliance & Risk Management

• Ensure compliance with MAS TRM Guidelines, PDPA, and other relevant standards (ISO 27001, PCI-DSS).
• Participate in internal audits and liaise with external auditors and regulatory bodies.
• Perform regular risk assessments and develop mitigation plans.

DevSecOps Integration

• Partner with DevOps to integrate security into CI/CD pipelines, infrastructure as code, and application development workflows.
• Review security implications of infrastructure design (AWS, microservices, APIs).
• Conduct secure code reviews and security testing (SAST/DAST).
• Choose and deploy tools for improved observability and monitoring

Training & Awareness

• Drive security training, phishing simulations, and awareness programs across the company.
• Build a security-first culture through education and regular updates.

Vendor & Tool Management

• Evaluate and manage third-party security vendors, tools, and contracts.
• Assess security posture of vendors and partners in line with regulatory expectations.

Key Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 5–8 years of experience in cybersecurity, with 2+ years in a lead or senior role.
• Experience working in FinTech or financial services is a strong advantage.
• Strong knowledge of IS027001 and other relevant security standards frameworks.
• Hands‑on experience with AWS security, APT landscape and tools, SIEM and log management, firewalls, DDOS and other endpoint protection.
• Familiarity with DevSecOps practices and secure software development lifecycle (SSDLC).
• Professional certifications preferred: CISSP, CISM, CEH, or equivalent.
• Strong problem‑solving and analytical skills.
• Excellent communication skills with the ability to explain complex security topics to non‑technical stakeholders.
• High sense of ownership, integrity, and confidentiality.
• Ability to work cross‑functionally.