Security Manager

PageGroup Corporation Solutions (Malaysia) Sdn Bhd; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

PageGroup Corporation Solutions (Malaysia) Sdn Bhd in Singapore is seeking an experienced security professional to design and govern security architecture across applications and cloud environments. You will work with risk, compliance, and engineering teams to implement robust controls.

The role requires deep knowledge of authentication, authorization, vulnerability management, and regulatory regimes (MAS TRM, PDPC PDPA).

Qualifications

• 7+ years in information security roles.
• Proficient in security controls and threat modeling.
• Familiar with regulatory framework in Singapore.

Responsibilities

• Design and govern security architecture across applications and cloud environments.
• Implement and oversee authentication, authorization, access controls, and encryption.
• Lead vulnerability management and security assessments.
• Align with DevSecOps and secure SDLC practices.
• Apply ISO/27001, NIST CSF and MITRE ATT&CK to secure deployments.

Skills

Security architecture

Vulnerability management

SDLC / DevSecOps

Regulatory knowledge (Singapore)

ISO-27001 / NIST / MITRE ATT&CK

API Security

Cloud Security (AWS/Azure)

Job description

Expertise in security architecture, applications and governance|| Singapore

Exp- Minimum of 7+ years

• Good command of Information Security control areas including Authentication/Authorization, Access Controls, Entitlement, Cryptography, Encryption, Network, Application/System Security, and Key Management. In-depth knowledge of Vulnerability Management frameworks (OWASP, SANS) is essential.
• Proficiency in SDLC, Agile/Iterative, DevOps/DevSecOps methodologies, and their integration with comprehensive security assessments.
• Demonstrated understanding and application of the Singapore regulatory framework, local laws concerning information security, technology risk, and data protection (e.g., MAS TRM, PDPC PDPA).
• Strong familiarity with global standards such as ISO-27001, NIST CSF, MITRE ATT&CK, and their practical application.
• Expertise in API Security and Cloud Security architectures, particularly in AWS or Azure environments.