Senior Information Security Specialist

Singtel; Singapore; On-site; Confidential; Full time

Job summary

Singtel is building an AI-first telco focused on secure, scalable technology platforms. We seek a senior security architect to provide independent risk assurance across technology initiatives and ensure compliance with regulatory requirements and security standards.

The role involves threat modelling, design review, and collaboration with IT, networks, and enterprise teams to strengthen Singtel's security posture and enable secure delivery of business initiatives across secure architectures and

Qualifications

• Bachelor's degree or diploma in IT, CS, or Engineering.
• Minimum 6 years in security assessment or related IT roles.
• Experience with system, network, IAM or virtualization security.

Responsibilities

• Perform security risk assessments for systems, apps, and third parties.
• Ensure initiatives comply with security policies and governance.
• Review security designs across infrastructure, cloud, IAM and data protection.
• Assess design docs and diagrams to mitigate technology risks before go-live.
• Conduct threat modelling for critical deployments and suggest mitigations.
• Collaborate with IT and business stakeholders to provide risk advisory.

Skills

Security assessment

Cybersecurity

Threat modelling

Risk advisory

Security architecture

Zero Trust

Regulatory compliance

Stakeholder management

Problem solving

Communication

Education

Bachelor's degree in IT/CS/Engineering

Job description

An empowering career at Singtel begins with a Hello. Our purpose, to Empower Every Generation, connects people to the possibilities they need to excel. Every "hello" at Singtel opens doors to new initiatives, growth, and BIG possibilities that takes your career to new heights. So, when you say hello to us, you are really empowered to say..."Hello BIG Possibilities".

Singtel is where Technology meets Purpose.

We're building an AI-first telco for the future - connecting people, businesses and communities through trusted networks, intelligent digital services and next-generation technology.

From transforming everyday experiences in mobile, broadband, entertainment and lifestyle services to enabling enterprises with AI, 5G+, cloud, cybersecurity, data centres and digital platforms, we create the technology that powers how millions live, work and connect.

At Singtel, your work creates real impact. You'll solve meaningful challenges, shape critical digital infrastructure and help build secure, resilient and AI-enabled solutions that serve businesses, digital ecosystems and communities across the globe.

This is where BIG Possibilities become reality. Whether you're engineering intelligent networks, advancing sovereign AI cloud platforms, strengthening cybersecurity, designing seamless customer experiences or driving sustainable innovation, you'll be part of teams shaping the future of technology.

Backed by decades of expertise and driven by a culture of continuous learning and innovation, Singtel offers the scale, opportunities and support to help you grow your career while making a difference where it matters most.

Role Summary

The purpose of this role is to provide independent security architecture and risk assurance across technology initiatives, ensuring that information security risks are identified early, assessed consistently, and managed effectively throughout the system lifecycle. The role enables secure delivery of business initiatives by ensuring technology solutions, infrastructure changes, and third-party services are designed and implemented in compliance with regulatory requirements, enterprise security standards, and the organisation’s risk appetite.

The role acts as a security risk and architecture advisor to Singtel IT, Telco Networks and Enterprise stakeholders, applying recognised security frameworks and threat modelling techniques to evaluate design decisions, identify control gaps, and recommend risk-based mitigations. Through continuous improvement of risk assessment practices and standards, the role strengthens the organisation’s overall security posture while supporting timely and informed decision-making.

How You Will Make An Impact

• Perform comprehensive information security risk assessments for new and existing systems, applications, infrastructure changes, and third-party engagements.
• Ensure technology initiatives and controls comply with internal security policies, standards, and governance requirements; proactively highlight gaps and recommend remediation.
• Review and validate security control designs across IT infrastructure, cloud environments, network security, identity and access management, data protection, and application security
• Assess design documents, architecture diagrams, and technical controls to confirm that technology risks are mitigated prior to go-live.
• Conduct threat modelling for critical systems and application deployments, identifying attack paths, threat scenarios, and control weaknesses, and recommending design-level mitigations.
• Collaborate with IT, application teams, and business stakeholders to provide risk advisory for projects and ad hoc reviews.
• Define, review, and promote secure architecture and security design patterns to guide solution teams in implementing consistent, scalable, and risk-aligned security controls.
• Drive continuous improvement of security risk assessment and design review frameworks, processes, and templates to enhance consistency, quality, and efficiency across project and solution reviews.
• Recommend new or enhanced security controls and architecture patterns based on emerging threats, risk assessment outcomes, regulatory changes, and industry best practices, and work with stakeholders to support their implementation.

Skills For Success

• Degree/Diploma in Information Technology, Computer Science, Engineering or related fields
• At least 6 years or more working experience in security assessment, cybersecurity, or related IT roles.
• Experience in Systems security, Network Security, Identity Access Management or Virtualization Security is required.
• Experience working within system integrator or consulting environments, including exposure to multi-client or complex delivery engagements, is an advantage.
• Hands-on experience in system and security administration, implementation, and solution design across servers, applications and telco networks, will be useful.
• Ability to apply Zero Trust security architecture principles to complex enterprise environments.
• Capability in threat modelling and technology risk assessment, including identification of threat scenarios, assessment of control effectiveness, and recommendation of risk mitigation strategies.
• Strong capability to interpret security baselines and standards and translate them into appropriate architectural and control requirements, aligned with regulatory, enterprise, and technology contexts.
• Ability to validate systems and solution designs against security and compliance baselines, identify gaps, and recommend appropriate remediation measures.
• Professional security management certifications such as a Certified Information Systems Security professional (CISSP), Certified Information Security Manager (CISM) or other similar credentials, will be preferred.
• Strong analytical and problem-solving skills.
• Effective time management and prioritisation skills.
• Sound conflict management and negotiation skills.
• High level of professionalism, commitment, and accountability.
• Resilience and adaptability in fast-paced or changing environments.
• Change-oriented mindset with a focus on continuous improvement.
• Ability to work independently with minimal supervision, with remote stakeholders, exercising sound judgement and initiative.

Are you ready to say hello to BIG Possibilities?

Join Singtel to shape what's next and accelerate your career through meaningful work, continuous learning, and real impact.