Security Consultant

Job Summary

We are seeking an experienced Security Consultant to join our Security Architecture and Consultancy team. You will serve as a trusted advisor, guiding project teams in designing secure systems and making sound security decisions throughout the project lifecycle.

Responsibilities

• Advise project teams on secure system design and solutioning across cloud, on-premises, and hybrid environments from concept to deployment
• Conduct detailed security architecture reviews to identify vulnerabilities, misconfigurations, and control gaps, providing prioritized remediation recommendations
• Guide teams on applying security design patterns and best practices in cloud security, application security, identity and access management, and data protection
• Perform structured threat modeling to identify threats and attack vectors, recommending mitigation controls aligned with system risk profiles
• Conduct risk assessments to evaluate and prioritize security risks, translating technical findings into clear business impacts for informed decision-making
• Develop and maintain security design patterns covering cloud security, application security, identity and access management, data protection, and AI system deployments
• Establish and update enterprise security standards and baselines for endpoint security, network security, cryptography, and AI system deployments, ensuring alignment with government policies and evolving threats
• Assess AI and machine learning system security across the model lifecycle, identifying risks and recommending appropriate controls
• Advise on secure and responsible AI system deployment, including guardrails, human oversight, and AI-specific incident response considerations
• Evaluate third-party AI services and large language model integrations for risks related to data residency, vendor access, model behavior, and supply chain exposure
• Develop AI-powered tools and workflows to improve efficiency and quality in security consultancy activities such as threat modeling, risk assessment, and architecture review
• Collaborate with teams to identify repetitive security tasks suitable for AI-assisted automation and prototype practical solutions

Required competencies and certifications

• Bachelor's degree in Computer Science, Information Security, or related field
• Minimum 9 years of cybersecurity experience focused on security architecture, risk assessment, and consultancy across cloud, on-premises, and hybrid environments
• Deep knowledge of security architecture principles and practices in cloud security, application security, identity and access management, and data protection
• Strong understanding of risk management methodologies, threat modeling techniques, and security compliance frameworks
• Working knowledge of Singapore Government security policies and frameworks, including IM8 and CCoP
• Familiarity with AI security concepts and security implications of AI and machine learning deployments
• Excellent communication and stakeholder engagement skills to present complex security concepts clearly to technical and non-technical audiences
• Ability to work independently, manage multiple engagements, and deliver quality outcomes with minimal supervision

Preferred competencies and qualifications

• Professional certifications such as CISM, CRISC, CISSP, or equivalent
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP)