Security Project Manager – Project Security Coaching – Level 4

Keoni; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

Keoni is seeking a security architect to support business and infrastructure projects by integrating security into every phase of design and operations.

The role emphasizes risk analyses, secure architectures for AWS/Azure/GCP, and collaboration with IT and security teams to deliver concise analyses for stakeholders.

Expect leadership in security governance, incident prevention, and guidance across cloud platforms and on-prem environments.

Qualifications

• Expert level in integrating security into projects.
• Expert level in conducting security risk analyses and prioritizing recommendations.
• Advanced security architecture and infrastructure design.
• Mastery of AWS, Azure, and GCP security architectures and PaaS analysis.
• Experience coaching security for business and infrastructure projects.

Responsibilities

• Support and advise projects in security integration.
• Conduct security and risk analyses and formalize recommendations.
• Evaluate security of architectures and documentation (DAT, three-tier, segmentation, API security).
• Design and evaluate secure hosting infrastructures with perimeter security.
• Analyze security of AWS, Azure, and GCP PaaS services and define requirements.
• Define secure architecture models for public cloud providers.
• Write security guides and standards and present analyses to stakeholders.
• Collaborate with IT, infrastructure, support, and security teams.
• Present complex topics to committees (CDG, COSTRAT).

Skills

Security in projects

Security risk analysis

Security architecture

Public cloud security

DevSecOps

Identity management

Container security

Cloud platforms

Tools

Docker

OpenShift

Kubernetes

Podman

Job description

Context and objective of the mission: To support and coach business and infrastructure projects in the integration of security, with strong expertise in the security of architectures.Main Responsibilities • Support and advise business and infrastructure projects in the security integration process. • Conduct security and risk analyses, gather the information necessary to assess the information system's security level, and then formalize and prioritize recommendations. • Evaluate and validate the security of technical architectures and architecture documentation (DAT, three-tier models, segmentation, API security, security relays, etc.). • Design and evaluate secure infrastructures for application hosting, particularly regarding perimeter security. • Analyze the security of AWS, Azure, and GCP PaaS services and define security requirements for the relevant environments. • Define secure architecture models for public cloud providers. • Write security guides and standards and present analyses to stakeholders. • Work closely with IT, infrastructure, support, and first- and second-line security teams (LOD1 and LOD2). • Present complex topics in a concise manner to strategic and managerial committees (CDG, COSTRAT, etc.).Required Skills and Expertise: • Security Approach in Projects: Expert level; mastery of the process of integrating security into projects. • Security and Risk Analysis: Expert level; conducting structured assessments, formulating and prioritizing recommendations. • Security Infrastructure and Architecture: Advanced level; mastery of secure application and infrastructure architectures. • Public Cloud: Mastery of AWS, Azure, and GCP security architectures and mechanisms, including PaaS service analysis and secure architecture models.Security areas to master : • Network security: firewalls, IPS/IDS, and perimeter security. • Identity and access management: IAM, Active Directory, and LDAP directories. • System security: vulnerability analysis, antimalware, EDR, and hardening. • Public cloud and Microsoft 365 security: security policies, CSPM, etc. • Container security and architecture: Docker, OpenShift, Kubernetes, Podman, etc. • Artificial intelligence security. • DevSecOps. • Bastions and administrative networks. • Data protection: database access, DLP, etc.Additional knowledge A good knowledge of the security processes and standards of large companies is desirable: lines of defense, GRC tools, BCP, GDPR, DORA and LPM.Required Profile • Experience: 6 to 9 years, or more than 9 years, in similar roles. • Positioning: Cross-functional profile with a good understanding of the various security domains and the functions offered by the associated tools and solutions. • Expertise: Proven experience in security coaching for business and infrastructure projects. • Communication: Ability to synthesize complex topics and present them to managers and strategic stakeholders. • Languages: Fluent French and professional English are essential.Application: CV + cover letter + copies of diplomas to be sent to [e-mail]