Senior Information Security Specialist (Security Architecture & Risk)

Cari; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Michael Page Singapore is representing a leading technology-driven organisation in the region seeking an experienced cybersecurity professional to conduct security risk assessments, review architectures, and drive threat modelling.

You will validate controls across identity management, networks, data protection, and applications, advise project teams, promote secure patterns, and push improvements in security governance.

Qualifications

• Experience conducting security risk assessments for applications, infrastructure, cloud, and third-party services.
• Ability to review architectures and security designs to identify risks and control gaps.
• Hands-on understanding of enterprise security, networks, identity, data protection, and app security.

Responsibilities

• Conduct security risk assessments for applications, infrastructure, cloud platforms, and third-party services.
• Review solution architectures and security designs to identify risks and control gaps.
• Perform threat modelling exercises and recommend practical design-level mitigations.
• Validate security controls across identity management, networks, data protection, and application security domains.
• Advise project teams on cybersecurity requirements throughout the project lifecycle.
• Develop and promote secure architecture patterns, standards, and best-practice frameworks.
• Drive continuous improvements to security assurance processes, methodologies, and governance practices.

Skills

Risk assessment

Threat modelling

Architecture reviews

Zero Trust

Stakeholder mgmt

Communication

Problem solving

Education

Degree or Diploma in IT / Cybersecurity

Job description

• Shape secure technology designs across enterprise and network environments
• Lead security risk assessments, architecture reviews, and threat modelling

About Our Client

Our client is a leading technology-driven organisation operating large-scale digital platforms, critical infrastructure, and enterprise services across the region. Renowned for its commitment to innovation, resilience, and operational excellence, the organisation continues to invest heavily in cloud technologies, cybersecurity, and digital transformation initiatives. The environment offers exposure to complex technology ecosystems spanning enterprise IT, networks, cloud services, digital applications, and third-party integrations, making it an ideal setting for experienced cybersecurity professionals seeking strategic impact.

Job Description

• Conduct security risk assessments for applications, infrastructure, cloud platforms, and third-party services.
• Review solution architectures and security designs to identify risks and control gaps.
• Perform threat modelling exercises and recommend practical design-level mitigations.
• Validate security controls across identity management, networks, data protection, and application security domains.
• Advise project teams on cybersecurity requirements throughout the project lifecycle.
• Develop and promote secure architecture patterns, standards, and best-practice frameworks.
• Drive continuous improvements to security assurance processes, methodologies, and governance practices.

The Successful Applicant

• Degree or Diploma in Information Technology, Computer Science, Engineering, Cybersecurity, or related disciplines.
• Experience in cybersecurity, information security assessment, technology risk, or security architecture roles.
• Strong background in one or more of the following: Network Security, Identity & Access Management, Systems Security, Cloud Security, or Virtualisation Security.
• Proven experience conducting security assessments, architecture reviews, and technology risk evaluations.
• Hands-on understanding of enterprise infrastructure, systems administration, security implementation, and solution design.
• Experience applying Zero Trust architecture principles within complex enterprise environments.
• Strong knowledge of threat modelling methodologies and security design review practices.
• Ability to interpret and apply security standards, baselines, regulatory requirements, and governance frameworks.
• Experience assessing compliance gaps and recommending effective remediation strategies.
• Professional certifications such as CISSP, CISM, CCSP, SABSA, TOGAF Security, or equivalent are highly regarded.
• Strong stakeholder management, communication, analytical, and problem-solving skills.
• Ability to work independently while influencing diverse technical and business teams.

What's on Offer

• Opportunity to influence cybersecurity strategy across large-scale technology environments.
• Exposure to enterprise, cloud, network, and digital transformation initiatives.
• Career progression within a mature and highly respected cybersecurity function.
• Ongoing investment in professional certifications, training, and technical development.
• Collaborative environment with senior technology and business stakeholders.
• Opportunity to work with emerging security technologies, frameworks, and best practices.
• Competitive remuneration and comprehensive employee benefits.