Head of Security Architecture

We are seeking an experienced Head of Security Architecture to lead the design and governance of enterprise security architecture across the organization. This role will drive security innovation, define strategic security roadmaps, and partner closely with Technology and Operations teams to ensure systems and solutions are designed, deployed, and operated with robust security controls that meet business, customer, and regulatory requirements.

Responsibilities:

The Head of Security Architecture will lead the development and governance of the enterprise security architecture framework, defining security blueprints, standards, and strategic roadmaps for infrastructure, cloud, applications, data, and emerging technologies. The role provides expert guidance on solution designs to ensure compliance with internal security policies, regulatory requirements (including MAS TRM), and industry best practices, while driving the adoption of Security by Design across all technology initiatives.

You will oversee security architecture for cloud and hybrid environments, covering areas such as identity security (IAM, PAM, IGA), network security and zero trust, data protection, endpoint security, secure configurations, DevSecOps integration, and emerging technologies such as AI/ML. The role includes evaluating security controls, conducting architecture assessments, identifying risks, and recommending enhancements for new platforms, applications, and systems.

A key part of the role is engaging senior stakeholders to advise on security implications of technology decisions, represent Security in architectural governance forums, and clearly communicate risks and recommendations to leadership. You will also support audits and regulatory assessments by providing design documentation, architectural evidence, and remediation guidance where needed.

Requirements:

• 15+ years of cybersecurity experience, including significant leadership responsibility.
• Proven experience in enterprise security architecture within large-scale, complex organizations.
• Strong track record working in highly regulated environments preferred.

Technical Expertise:

• Cloud security (AWS/Azure/GCP)
• Network security & zero trust architectures
• IAM, PAM, IGA, and identity security frameworks
• Data protection (encryption, DLP, tokenization)
• Application security and secure SDLC/DevSecOps
• Endpoint protection and vulnerability management
• Familiarity with AI/ML security, threat modeling, and risk assessment methodologies.

Certifications (Preferred)

• CISSP, CISM, CCSP, SABSA, TOGAF, or equivalent.

To apply:

If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi via LinkedIn or at [Confidential Information] for a discussion. Due to the confidential nature of this search, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389

Lic: 16S8060