Total 29 security job vacancies in Information Technology category

Job Description

The Security Engineer's role is to support the product team in performing product/ solution installation, testing, documentation, and support.

Responsibilities

• To study and understand the technical aspects of all the security solutions carried by our company i.e. Firewall, AntiVirus, EDR etc.
• To perform installation and customization of product and provides technical support.

Required Skills

• Candidate must possess at least a Diploma, Advanced/Higher/Graduate Diploma, Bachelor's Degree, Post Graduate Diploma or Professional Degree in Engineering (Electrical/Electronic), Computer Science/Information Technology, Science & Technology or equivalent. 
• Solid understanding of Network Routing and Switching, DNS, Firewall, IPSEC, VPN and familiar with OSI 7 layers.
• Good exposure in Linux/Unix environment would be plus.
• Knowledge of scripting languages (Python, powershell, bash) would be plus.
• Able to work well under pressure. 
• Applicants must be independent, aggressive and result oriented.
• Applicants should be Malaysian citizens. 

Additional Notes

• Open Source knowledge, Internet Infrastructure knowledge (Firewall, WAF, Proxy), etc will be an advantage.
• Keen to work in Cybersecurity field.
• The successful candidate would have the opportunity to be an understudy of a Senior Security Engineer.
• Fresh Graduates are encouraged to apply.
• Selected candidate must be able to attend on site interview.

Perks & Benefits

• Medical insurance
• Personal leave
• Open culture
• Personal development opportunities

職位描述

安全工程師的職責是協助產品團隊進行產品/解決方案的安裝、測試、文件編寫和支援。

職責

• 學習並了解我公司所有安全解決方案的技術面，例如防火牆、防毒軟體、EDR 等。
• 負責產品的安裝和定制，並提供技術支援。

所需技能

• 候選人必須至少擁有工程（電氣/電子）、電腦科學/資訊技術、科學與技術或同等專業的文憑、高級/高等/研究生文憑、學士學位、研究生文憑或專業學位。
• 精通網路路由和交換、DNS、防火牆、IPSec、VPN，並熟悉OSI 7層模型。
• 熟悉Linux/Unix環境者優先考慮。
• 熟悉腳本語言（Python、PowerShell、Bash）者優先考慮。
• 能夠在壓力下良好工作。
• 申請人必須是獨立自主、積極進取、以結果為導向。
• 申請者須為馬來西亞公民。

補充說明

• 具備開源知識、網際網路基礎設施知識（防火牆、WAF、代理等）將是優勢。
• 渴望從事網路安全領域的工作。
• 成功入選者將有機會成為高級安全工程師的助手。
• 歡迎應屆畢業生申請。
• 被選中的候選人必須能夠參加現場面試。

福利待遇

• 醫療保險
• 個人休假
• 開放文化
• 個人發展機會

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

Responsibilities

·      Define and drive the vision, roadmap, and maturity model for application security across the enterprise.

·      Align application security initiatives with business objectives, compliance requirements, and risk management frameworks.

·      Act as the primary liaison between development teams, security functions, and executive stakeholders.

·      Secure Development Lifecycle (SDLC) Integration

·      Embed security practices into the SDLC, including threat modeling, secure design reviews, and code analysis.

·      Champion DevSecOps principles, ensuring security automation and continuous integration pipelines are robust and scalable.

·      Provide guidance on secure coding standards, frameworks, and best practices.

·      Establish policies, standards, and metrics to measure application security effectiveness.

·      Conduct regular risk assessments and oversee remediation of vulnerabilities.

·      Lead and mentor a team of application security engineers and specialists.

·      Partner with product owners, architects, and developers to balance innovation with security requirements.

·      Build strong relationships with executive leadership to communicate risks, progress, and strategic priorities.

·      Evaluate emerging technologies, tools, and methodologies to enhance application security capabilities.

Qualifications

·      Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

·      8+ years of experience in application security, software development, or cybersecurity, with at least 3 years in a leadership role.

·      Strong knowledge of secure coding practices, OWASP Top 10, and modern application architectures (cloud-native, microservices, APIs).

·      Hands-on experience with application security tools (SAST, DAST, IAST,RASP, container security).

·      Proven ability to lead cross-functional teams and influence executive stakeholders.

·      Excellent communication, leadership, and problem-solving skills.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to debbie@peopleprofilers.com

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

 Tel: 69509748

http://www.peopleprofilers.com

debbie@peopleprofilers.com

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

As a Networking Managed Services Engineer (L2) at NTT DATA, you'll take on a developing engineering role where your main goal is to ensure our clients' IT infrastructure and systems remain operational. You'll achieve this by proactively monitoring, identifying, investigating, and resolving technical incidents and problems. You'll work closely with our clients and internal teams to ensure that services are restored swiftly, in line with our service level agreements (SLAs).

Your day will revolve around reviewing client requests and tickets, applying your technical expertise to resolve them efficiently and effectively. You'll be the go-to person for second-line support, handling incidents and requests of medium complexity. In addition to your daily tasks, you'll have opportunities to contribute to exciting project work from time to time.

You'll proactively monitor work queues, execute operational tasks, and update tickets with the actions you've taken. Identifying, analysing, and logging issues before they escalate will be a key part of your role. You'll communicate with other teams and clients to provide support and ensure that changes are executed with clear risk identification and mitigation plans.

As part of the shift handover process, you'll highlight key tickets and upcoming critical tasks for the next shift. When needed, you'll escalate tickets to ensure the right focus from our Centres of Excellence (CoE) and other teams. Collaborating with our automation teams, you'll work on optimizing efforts and automating routine tasks, all while coaching our Service desk and L1 teams in both technical and behavioural skills.

You'll also establish monitoring for client infrastructure, leading and managing initial client escalations for operational issues. Contributing to the change management process, you'll log change requests, execute approved maintenance activities, and audit incident and request tickets for quality. Your insights will drive trend analysis reports, identifying tasks suitable for automation to reduce tickets and optimize efforts. You might also support disaster recovery functions and other related tasks as needed.

To thrive in this role, you need to have:

• Proficiency in technologies such as Pulse Secure SSL VPN, Palo Alto, Fortinet, Cisco Nexus switches/routers/firewalls, and more familiarity with ticketing tools.

• At least one technical certification in the above-mentioned technologies.

• Strong planning skills, with the ability to anticipate and adapt to changing circumstances.

• Adaptability and resilience in a dynamic work environment.

• Ability to communicate and work effectively across different cultures and social groups.

• Proficiency in active listening and client-centric communication.

• A positive outlook and the ability to work well under pressure.

• A client-first attitude, always seeking to create positive client experiences.

• A bachelor's degree or equivalent qualification in IT/Computing, or equivalent work experience.

Role: ITSO - Application Security

JD:
Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred.

Role: ITSO Application Security Consultant

JD:
Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred.

[Job ID: 1600983]

Responsibilities

• Deliver professional services, including deployment, implementation, and upgrades of cybersecurity products distributed by Netpoleon. This may occasionally involve customer coordination and project timeline management.
• Provide practical and effective technical solutions or alternatives based on customer requirements.
• Conduct product training for customers, partners, and internal teams.
• Perform installation, configuration, and basic troubleshooting independently using product documentation.
• Continuously upskill and obtain relevant technical certifications for assigned technologies.
• Develop into a subject matter expert over time and support knowledge transfer to internal teams for enhanced customer support.
• Provide technical support to sales and support teams, including product clarification, solution design input, tender compliance, and ad-hoc technical assistance.
• Perform any other duties as assigned.

Requirements

• 2 years of experience in IT, Information Security, or Cybersecurity preferred
• Strong knowledge of cybersecurity and IT infrastructure, including:
  Firewalls, VPN, DLP, IDS/IPS, Web Proxy, DNS, Email Security, SIEM, log management, virtualization, containers, cloud platforms (AWS, Azure, Google Cloud), DevOps/DevSecOps, IAM, PAM, endpoint security, CyberArk Conjur.
• Solid troubleshooting skills in networking and systems, including:
  TCP/IP, routing, NAT, VLAN, multicast, OSPF, BGP, Active Directory, LDAP, RADIUS, SNMP, Syslog, SMTP, TLS, SSH.
• Strong interest in cybersecurity trends and attack techniques.
• Relevant certifications are an advantage:
  Cisco CCNA/CCNP, Check Point CCSE/CCSM, CyberArk CDE, CISSP, CREST, OSCP, and other security-related certifications.

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771

·  At least 4 years combined work experience in software development, application security, and cloud computing (e.g., AWS)

· Familiar with mobile and web application programming interfaces (API) architecture (e.g., REST, SOAP, SSL/TLS)

· Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks

· Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard

· Familiar with Agile development processes, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CD pipelines

·  Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc.

· Track and address security vulnerabilities with timely remediation and patching processes.

· Conduct security awareness training sessions

·Good verbal/written communication, collaboration skills and experience interactingwith various stakeholders

· Strong analytical, problem-solving, and troubleshooting skills; ability to workindependently

· Relevant certifications preferred (e.g., CISSP, OSCP, AWS security, AWS DevOps Engineer, or equivalent, etc.)

· Experience in working with Government Commercial Cloud (GCC) preferred.

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Software Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Job Description:

• Handle Maintenance and Support related matters
• Identify & resolve gaps within Post-Sales Resources to ensure day to day Post-Sales operations are not affected
• Providing point of contact for support/project escalation relating to assigned product coverage
• Constantly working with product team leads on building the team capabilities and well equipped with skills on delivery of services
• Ensure projects are consistently follow up by project owners and push towards closure
• Exploring ways on optimizing implementation duration
• Ensure Calendar updates and Eworkorders process are in place
• Working closely with Pre-sales on incoming service delivery based on team capabilities.
• Work with Technical Lead on setting roles, responsibilities and monitor achievements of individual team members
• Point of contact for all Post-Sales relatedmatters on assigned product coverage

Requirements:

• Bachelor's degree or Diploma in Cyber Security, Computer Science, Computer Engineering or related field
• At least 5 - 7 years relevant experience in IT industry
• Able to work independently as well as in a team environment
• Excellent interpersonal and communication skills

Product area

Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.

Job description

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

Qualifications

Job responsibilities

• Write and review backend infrastructure code.
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact on hardware, network, or service operations and quality.
• Perform technical security assessments, code audits and design reviews.
• Develop technical solutions to help mitigate security vulnerabilities.
• Advocate security and secure practices throughout Google Payments.

Minimum qualifications

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with software development in one or more programming languages (e.g., Go, Python, C, C++, Java, JavaScript), or 1 year of experience with an advanced degree.
• 1 year of experience with security in attacks and mitigation methods.

Preferred qualifications

• Master's degree or PhD in Computer Science, or a related technical field.
• Experience in application and service security, including design reviews, and source code assessments.
• Knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.

Company Description

Paradox Singapore is an urban resort that offers guests a sophisticated yet playful blend of traditional refinement and modern elegance. Located in the vibrant river district of Clarke Quay, the hotel is perfect for those looking for a stylish home base during business travel, or a quiet sanctuary to relax and unwind. Our comfortable rooms and spacious suites feature picturesque views of the city's skyline and are equipped with thoughtful amenities for laid-back style without any fuss.

Role Description

This is a full-time on-site role for Technology and Information Security Manager to oversee both hotel technology operations and corporate information security initiatives.

This role combines operational IT leadership with regional security governance and project management responsibilities. Focuses on supporting Paradox Singapore's technology infrastructure and day-to-day operations, while dedicated to corporate governance, information security, and enterprise-wide technology projects.

Responsibilities:

Property Cybersecurity & Data Defense

• Endpoint & Perimeter Security: Manage, monitor, and maintain 100% deployment coverage of Endpoint Detection and Response (EDR) agents across all local property workstations, front-desk pods, and back-office servers.
• Network Segmentation: Enforce and regularly audit the absolute logical isolation of guest networks (Guest Wi-Fi, In-room IPTV) from secure administrative and corporate data environments.
• Human Firewall Development: Design and execute localized scam-awareness briefings, phishing simulations, and mandatory cybersecurity onboarding training tailored specifically for high-risk frontline hotel staff.
• PDPA Compliance & Data Protection: Act as the on-site IT operational champion for the Singapore Personal Data Protection Act (PDPA). Ensure that the information collection, processing, storage, and disposal of PII strictly adhere to PDPA obligations.

Local IT Project Management & Execution

• Project Lifecycle Management: Lead the end-to-end delivery (initiation, scoping, procurement, implementation, and closeout) of local property-level technology upgrades, such as Opera Cloud POS, Document Management Systems (DMS) or PMS Integration refreshes.
• Change Control & User Acceptance Testing (UAT): Coordinate with local department heads to design UAT workflows and schedule maintenance windows, ensuring zero disruption to guest services and operational downtime during system cutovers.

Daily Operations & Systems Support

• Core Systems Escalation (L2): Act as the ultimate on-site escalation layer for critical hospitality hardware and software, including the Property Management System (PMS), POS platforms, and secure payment processing gateways.
• Business Continuity: Manage local IT operational expenditure (OPEX), verify the automated integrity of daily localized server and cloud backups, and maintain disaster recovery readiness

Enterprise Project Management & Architecture

• Tenant Unification & Consolidation: Serve as the Lead Regional Project Manager orchestrating the multi-phase consolidation of disparate property email domains and assets into a unified enterprise Microsoft 365 tenant environment.
• Identity Boundary Engineering: Design, build, and maintain a secure multi-site Active Directory forest architecture mapping out secure connections between regional property domains.
• Strategic Roadmap Delivery: Champion and execute infrastructure and security milestones aligned with the group’s overarching 5-year IT Strategic Roadmap.

Corporate Security Governance & Risk Management

• Vulnerability Orchestration: Manage group-wide enterprise network vulnerability scanning protocols. Schedule regular external and internal scans across all regional properties and hold local teams accountable to strict remediation timelines.
• Forcepoint DLP Administration & Oversight: Engineer, deploy, and manage the Forcepoint Data Loss Prevention (DLP) enterprise architecture across all regional property and corporate endpoints. Design and enforce centralized DLP rules, discovery policies, and data classification tags to monitor and prevent unauthorized exfiltration of sensitive guest and corporate data via email, web channels, USB, or cloud storage.
• Global PCI-DSS & PDPA Alignment: Point of contact for external security auditors. and reporting to demonstrate continuous, audit-ready compliance with global PCI-DSS standards and localized data privacy laws (such as Singapore's PDPA).
• Incident Response Playbooks: Standardize and update corporate Incident Response plans and business continuity guidelines. Logs from SIEM can be used to discover threats and incident consoles to triage, investigate, and mitigate potential internal data leaks or brand-level digital crises.
• Vendor Risk Management: Conduct rigorous security architecture reviews and data privacy assessments on all third-party APIs, hospitality booking engines, and enterprise software platforms before approving group-wide deployment.

Technical AI Safeguards & Governance

• Understand and lead Risk Governance & SaaS Management,
• Track data tier classifications, vendor SOC 2 compliance, and geographic data hosting locations.
• Establish and manage a centralized ERM (Enterprise Risk Management) SaaS registry and automated vetting workflow to catalog, risk-score, and govern all group-wide AI models, autonomous agents, and SaaS vendors before regional deployment.
• Established the policies used to build, monitor, and regulate AI models. Its goal is to ensure AI technologies remain safe, transparent, unbiased, and compliant with laws

Local Policy Localization & Operationalization

• Localized Policy Standards: Translate corporate IT blueprints into operational reality by authoring localized standard operating procedures (SOPs)

Corporate IT Policy Architecture & Global Governance

• Provide support to the Global Director, Information and Technology for policy review and audit compliance: the annual review and revision cycle of all corporate IT security policies, modifying standards based on shifting threat landscapes, emerging technologies (like Agentic AI), and global hospitality audit requirements (PCI-DSS)

Additional Responsibilities

• Undertake projects and assignments as directed by Corporate Management

We are seeking a Security Architect with a strong development and solution architecture background to lead our architecture consulting team and design security solutions that enable business outcomes while maintaining robust security postures. This role reports to CISO.

Key Responsibilities:

Architecture Security Reviews and Threat Modelling 

·       Lead a team of security architecture consultants, providing threat-driven architecture security reviews and threat modelling

·       Drive development of AI enabled security reviews, threat modelling and security enhancements of CI/CD pipeline

Build Security In / Shift Left 

·       Drive strategic security architecture decisions across business units and technology domains

·       Develop secure reference architectures and design patterns for modern application stacks and BSI

·       Build security-by-design with development workflows

·       Enhance CI/CD security tooling and automation and drive adoption and metrics reporting 

·       Reignite Security Champions initiative to improve shift left approach

Enterprise and Identity security architecture 

·       Design identity governance solutions for hybrid and multi-cloud environments

·       Assess and implement advanced IAM patterns including fine-grained authorization, privilege escalation controls, and just-in-time access

·       Develop identity integration strategies for AI systems and automated decisioning

·       Engage with platform and DevOps engineering teams to build secure infrastructure and technology foundations

·       Propose initiatives to address security gaps or enhance the overall security posture

·       Build positive flywheel effect among stakeholders to enable security adoption and cultural transformation

Gen AI Security

·       Design and integrate security frameworks for Gen AI deployment, monitoring, and governance within AI risk framework

·       Maintain security blueprints for(Gen) AI deployments, including MCP and AI guardrails

·       Lead agentic AI security initiative with focus on authentication and authorization of AI agents

Requirements:

·       Bachelor’s degree in computer science, engineering, or related fields

·       Strong software engineering background with more than 5years of experience as a software engineer / developer.

·       3+ years of team or lateral leadership experience in technology architecture or security consulting teams

·       Proven leadership of security architecture/threat modelling.

·       Track record leading complex, multi-stakeholder security initiatives.

·       Ability to ship secure reference architectures and drive developer adoption at scale.

·       Experience with AI/ML security challenges and solutions including Large Language Model (LLM), Model Context Protocols (MCP), Agentic AI and AI governance frameworks

·       Comprehensive knowledge of application security principles(OWASP, SANS, etc.)

·       Experience with modern security tooling: SAST, DAST, SCA, container scanning, secrets management

·       Relevant certifications (eg. SANS, AWS, Azure)