Cyber and IT Security Advisory Specialist SG

Key Responsibilities:

• Provide security advisory and oversight for AWS cloud architectures, ensuring alignment with security-by-design and defense‑in‑depth principles.
• Define, implement, and enforce AWS cloud security standards, guardrails, and best practices across accounts, regions, and workloads.
• Conduct security architecture reviews for AWS‑based applications and infrastructure, including VPC design, IAM models, data protection, and network segmentation.
• Review and track remediation of cloud security findings.
• Ensure AWS environments comply with applicable regulatory and industry requirements (e.g. MAS TRM, NIST).
• Responsible for ensuring IT systems and applications within our organization meet the needs of the business while adhering to security best-practices, compliance and regulatory requirements.
• Collaborate with teams within and outside of Information Security to assess, monitor, and reduce security risk within the organisation.
• Manage project risks and issues, including risk identification, assessment, monitoring, remediation, and ensure escalation in project governance
• Experience in leading and implementing multiple security solutions and technologies across one or more IT Security domains (Cyber Program Management, Threat Intelligence, Identity & Access Management, Data Protection, Privacy). This experience should include responding to compliance and advisories from regulatory bodies.
• Ensure cybersecurity programs are structured and well-planned and budgeted
• Oversee CAPEX & OPEX budget for security services and projects and manage all reporting to Committees
• Work with IT Security Leads to manage changes in IT Security Roadmap and manage the change management for IT Security programs
• Manage IT Security incidents, mitigation planning, damage assessment and corrective measures.
• Review vulnerability assessment & penetration testing to assess the residual risks & mitigation plans.
• Responsible for ensuring identified cyber security issues are addressed in a timely manner.
• Raise cybersecurity knowledge and awareness within the organisation

Key Requirements:

• Minimally Bachelor's degree in computer science or equivalent
• Security industry certifications such as CISSP, CISA, CREST, CEH, SANS, GSEC, AWS Certified Security etc are preferred.
• Minimum 6-10 years’ experience working in a highly-regulated IT Security/CII environment; Including 5 years of threat intelligence, incident response and VAPT experience

Technical / Functional skills

• Good knowledge and hands-on experience in native-cloud services on Cloud Security
• Good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong knowledge of security best practices and concepts.
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Advance knowledge & Hands-on experience in supporting and maintaining enterprise IT Security solutions and technologies such as Firewall, IDS/IPS and Proxy, etc
• Advance knowledge of Windows and/or Unix-based systems / architectures and related security.
• Advance knowledge of cryptography / cryptographic systems
• Advance level of knowledge of LAN / WAN technologies
• Knowledge of VPN technologies.
• Be able to articulate threats and risk to business and technology leaders.

Personal skills (Soft Competencies [Core/Leadership])

• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.
• Strong interest in the field of information security.
• Creative, independent with good problem solving skills.
• Ability to work effectively as a team