Senior Security Architect & Risk Advisor

Singtel; Singapore; On-site; Confidential; Full time

Job summary

Singtel is building an AI-first telco, and this role provides independent security architecture and risk assurance across technology initiatives to ensure regulatory compliance and enterprise security standards throughout the lifecycle.

You will act as a security risk and architecture advisor to Singtel IT, Telco Networks and Enterprise stakeholders, applying threat modelling techniques to identify gaps and recommend risk-based mitigations for secure delivery.

Qualifications

• Degree/Diploma in Information Technology, Computer Science, Engineering or related fields.
• 6+ years in security assessment, cybersecurity, or related IT roles.
• Experience in systems security, network security, Identity Access Management or virtualization security.
• Experience in system integrator or consulting environments is an advantage.
• Hands-on experience in system and security administration, implementation, and solution design across servers, applications and telco networks.
• Ability to apply Zero Trust security architecture principles to complex enterprise environments.
• Capability in threat modelling and technology risk assessment, including identification of threat scenarios, assessment of control effectiveness, and recommendation of risk mitigation strategies.
• Strong capability to interpret security baselines and standards and translate them into appropriate architectural and control requirements, aligned with regulatory, enterprise, and technology contexts.
• Professional security management certifications such as CISSP or CISM preferred.
• Strong analytical and problem-solving skills.

Responsibilities

• Perform comprehensive information security risk assessments for new and existing systems, applications, infrastructure changes, and third-party engagements.
• Ensure technology initiatives and controls comply with internal security policies, standards, and governance requirements; proactively highlight gaps and recommend remediation.
• Review and validate security control designs across IT infrastructure, cloud environments, network security, identity and access management, data protection, and application security.
• Assess design documents, architecture diagrams, and technical controls to confirm that technology risks are mitigated prior to go-live.
• Conduct threat modelling for critical systems and application deployments, identifying attack paths, threat scenarios, and control weaknesses, and recommending design-level mitigations.
• Collaborate with IT, application teams, and business stakeholders to provide risk advisory for projects and ad hoc reviews.
• Define, review, and promote secure architecture and security design patterns to guide solution teams in implementing consistent, scalable, and risk-aligned security controls.
• Drive continuous improvement of security risk assessment and design review frameworks, processes, and templates to enhance consistency, quality, and efficiency across project and solution reviews.
• Recommend new or enhanced security controls and architecture patterns based on emerging threats, risk assessment outcomes, regulatory changes, and industry best practices, and work with stakeholders to support their implementation.

Skills

Security risk assessments

Threat modelling

Zero Trust

Security architecture

Regulatory compliance

IAM

Cloud security

Analytical skills

Negotiation skills

Independent work

Education

Degree/Diploma in IT or related

Tools

Threat modelling tools

Cloud security tools

IAM tools

Job description

Singtel is building an AI-first telco, and this role provides independent security architecture and risk assurance across technology initiatives to ensure regulatory compliance and enterprise security standards throughout the lifecycle.

You will act as a security risk and architecture advisor to Singtel IT, Telco Networks and Enterprise stakeholders, applying threat modelling techniques to identify gaps and recommend risk-based mitigations for secure delivery.