Cyber Security Consultant (Architecture Security)

Key Responsibilities

Our client is in search of a seasoned Security Consultant to become a vital member of its Security Architecture and Consultancy team. This position will serve as a trusted security advisor for project teams, offering expert guidance on secure solution design, security architecture, threat modeling, risk assessment, and the integration of emerging technologies such as AI.

Location: Central

Core Responsibilities

• Serve as a reliable security advisor to project teams, delivering insights on secure system design across cloud, on-premises, and hybrid environments throughout the project lifecycle.
• Conduct thorough security architecture reviews to uncover vulnerabilities, misconfigurations, control gaps, and design risks, providing prioritized remediation strategies.
• Offer guidance on security architecture and design patterns encompassing cloud security, application security, IAM, data protection, and AI systems.
• Execute threat modeling and security risk assessments, pinpointing attack vectors, assessing risks, and suggesting suitable security controls.
• Convert technical security findings into understandable business impacts and risk considerations for both technical teams and senior stakeholders.
• Establish and maintain enterprise security standards, baselines, and reusable security design patterns in areas including network, endpoint, cryptography, cloud, application, and AI security.
• Evaluate the security posture of AI and machine learning systems throughout their development, training, deployment, and operational lifecycles.
• Provide counsel on the secure and responsible deployment of AI, focusing on security guardrails, human oversight, incident response, and third-party AI/LLM risks.
• Assess third-party AI services and LLM integrations, taking into account data residency, vendor access, model behavior, and supply-chain risks.

Qualifications

• A minimum of 8 years of relevant cybersecurity experience, with substantial expertise in security architecture, risk assessment, and security consultancy.
• Knowledge of security compliance frameworks and Singapore Government security policies, including IM8 and CCoP. Experience with Singapore Government agencies is a plus.
• Preferred certifications include CISSP, CISM, CRISC, or equivalent.
• A Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.
• Extensive knowledge of security architecture in cloud, on-premises, and hybrid environments.
• Solid understanding of cloud security, application security, IAM, data protection, threat modeling, and security risk management.
• Familiarity with AI/ML security, specifically the risks associated with AI system deployment and third-party AI/LLM services.
• AWS Certified Security – Specialty, CCSP, or equivalent cloud security certifications are advantageous.