Senior Security Engineer, SDLC & Risk Advisory

FPT Asia Pacific; Singapore; On-site; SGD 150,000 - 230,000; Full time

Job summary

FPT Asia Pacific is seeking an experienced Technology Information Security Officer (TISO) to provide security assessment, advisory, and oversight across technology initiatives and business applications in Singapore. You will embed secure-by-design and secure-by-default principles and work with development, architecture, and technology teams to integrate security throughout the SDLC.

You will lead security assessments, risk management, and governance, ensuring alignment with MAS TRM, PDPA, ISO

Qualifications

• Experience leading security assessments and risk management across technology initiatives.
• Proven advisory capability to development, architecture, and project teams on secure-by-design/secure-by-default practices.
• Strong understanding of API security, cloud security architectures, and regulatory requirements.

Responsibilities

• Conduct comprehensive security assessments to identify risks, gaps, and vulnerabilities.
• Provide security guidance across the SDLC and development lifecycle.
• Review and approve security assessments for projects and operations.
• Promote secure design and secure-by-default across initiatives.
• Collaborate with risk, audit, architecture, and engineering teams to improve security governance.

Skills

Information Security

Risk Management

Security Assessments

SDLC Security

DevSecOps

Cloud Security (AWS/Azure)

ISO 27001 / NIST

MAS TRM / PDPA knowledge

Communication

Stakeholder Management

Education

Bachelor's degree in Information Security

Advanced certifications (CISSP / CISM / CISA)

Tools

AWS

Azure

Kubernetes

OWASP

SAML/OAuth

Job description

FPT Asia Pacific is seeking an experienced Technology Information Security Officer (TISO) to provide security assessment, advisory, and oversight across technology initiatives and business applications in Singapore. You will embed secure-by-design and secure-by-default principles and work with development, architecture, and technology teams to integrate security throughout the SDLC.

You will lead security assessments, risk management, and governance, ensuring alignment with MAS TRM, PDPA, ISO