Key Responsibilities

Define and review system security architecture, conduct threat modeling, and map risks to controls.
Ensure compliance with IM8, WOG security policies, and PDPA; maintain SRAs, VAs, PTs, and hardening reports.
Oversee secure development and DevSecOps practices, including SAST/DAST and container scanning.
Guide API security, token/secret management, and secure service-to-service communication.
Plan, manage, and track vulnerability assessments, penetration tests, and security certifications.
Approve and enforce OS, middleware, database, container, and API gateway hardening standards.
Lead incident investigation, RCA, containment, and coordinate with SOCs and stakeholders.
Manage continuous vulnerability monitoring, patching, and risk assessments for deferred fixes.
Monitor security events, support audits, maintain risk registers, and report metrics to management.
Govern access control, PAM, MFA, RBAC, and drive continuous improvement in security operations.

Key Requirements:

Degree in Computer Science / Cybersecurity / Information Security or equivalent .
8+ years of IT experience, including 5+ years as a Security Lead or Security Architect .
Proven experience in Singapore Government IT projects and IM8/government security compliance .
Hands-on experience with Kubernetes, Docker security, API security, Identity & Access Management (IAM)
Experience with security tools (SAST/DAST/SIEM) and CI/CD-integrated security
Preferred Certifications (Any): CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA) , AWS or Azure Security certifications.

Apply, please kindly email your updated resume to [email protected].

Only shortlisted applicants will be notified.

APBA TG Human Resource Pte Ltd (14C7275) || Akshya R (R24122440)

IT Security Lead | Singapore Citizen Only !