Information Security Lead

1. Data Sovereignty & Access Governance (The Gatekeeper)

Act as the Primary Custodian of production environment credentials (Root Keys, Master Passwords) for AWS/Google Cloud/Alibaba Cloud.

Review and Approve privileged access requests and deployment tickets from global engineering teams; ensure no unauthorized cross-border access occurs.

Manage Bastion Host (Jumpserver) policies to ensure all production operations are logged, audited, and attributed to specific individuals.

2. Regulatory Compliance & Audit

Serve as the Key Point of Contact (POC) for Singapore authorities (CSA, PDPC) and external auditors regarding data security matters.

Ensure the organization's compliance with EO 14117 (US Data Security) requirements, specifically regarding data residency and physical separation of duties.

Conduct monthly reviews of cloud audit logs (e.g., CloudTrail) to detect and block any non-compliant remote access attempts.

3. Incident Response & Operations

Lead the Singapore Incident Response (IR) process. In the event of a cyber threat, you have the authority to execute the Kill Switch to isolate local infrastructure.

Work closely with the Senior DevOps Engineer (Singapore base) to execute emergency patches and disaster recovery drills.