We are working with a leading financial firm seeking a hands-on Cybersecurity Architect to design and deliver security controls across cloud, infrastructure, endpoint, identity, and security operations.

This role requires both architecture ownership and hands-on delivery involvement, with a strong focus on Cloud Security.

Responsibilities

Design and maintain security architecture across on-premises and Azure cloud environments
Build practical, right-sized security controls for a lean hedge fund environment
Architect Azure security, secure landing zones, ingress/egress controls, identity security, PAM, and secrets management
Improve endpoint security baselines, vulnerability management, patching, and software risk remediation
Lead technical delivery across SIEM/SOC integrations, DLP, network segmentation, EDR/XDR, and vulnerability management
Work with infrastructure, cloud, application, and project teams to embed security by design
Produce technical documentation, engineering standards, and deployment playbooks
Provide senior technical escalation for security incidents and outsourced SOC/SIEM partners
Conduct threat modelling for new applications, platforms, and infrastructure changes
Translate audit, cyber risk, and regulatory requirements into engineering solutions

Requirements

8-12 years experience in cybersecurity engineering, security architecture, cloud security, or security infrastructure
Strong hands-on experience with Microsoft Defender for Endpoint, Microsoft 365 Defender / E5 Security, Entra ID, identity protection, and Azure security controls
Strong Azure security architecture and engineering experience
Experience across SIEM/SOC, EDR/XDR, DLP, vulnerability management, network segmentation, endpoint security, and patch/software deployment
Proven ability to design and deliver security controls across hybrid cloud environments
Financial services experience preferred hedge fund or asset management experience advantageous
Comfortable working in a lean environment requiring both architecture ownership and hands-on delivery
Familiarity with MAS TRM, NIST CSF 2.0, or similar security frameworks

With well over a decade of a solid and enviable track record behind us, headquartered in Hong Kong, Pinpoint Asia Infotech Pte Ltd (EA License: 16C8291) is the go-to IT Search Firm for several top Investment Banks and Financial Institutions.

If you are interested in the above position, please send your CV to Charlie Kim @ [HIDDEN TEXT] (EA Registration number: Reg No: R23112483) and include the Cybersecurity Architect - Leading Financial Firm - J12931 in the subject title.