Job Description

Role Overview

We are seeking an experienced Senior Security Consultant to provide security architecture and advisory services across enterprise technology projects. The role involves guiding project teams in designing secure systems, conducting security architecture reviews, performing threat modelling, and assessing cybersecurity risks across cloud, on-premises, and hybrid environments.

The successful candidate will also contribute to developing enterprise security standards, strengthening AI security governance, and introducing AI-powered tools to improve security consultancy processes.

Key Responsibilities

Security Architecture & Consultancy

Provide security advisory services to project teams throughout the system development lifecycle, from initial solution design to deployment.
Conduct security architecture reviews for new and existing systems, identifying vulnerabilities, configuration weaknesses, and security control gaps.
Recommend appropriate security controls and remediation measures across cloud infrastructure, applications, identity and access management, and data protection.
Develop and maintain reusable security design patterns and architecture guidelines.

Threat Modelling & Risk Assessment

Conduct structured threat modelling to identify potential threats, attack vectors, and system vulnerabilities.
Perform cybersecurity risk assessments and recommend appropriate mitigation strategies.
Evaluate security risks and communicate their technical and business implications to project teams and senior stakeholders.
Ensure security recommendations align with enterprise security requirements and applicable regulatory frameworks.

Security Standards & Governance

Develop and maintain enterprise security standards, baselines, and design patterns across endpoint security, network security, cryptography, cloud security, and application security.
Review and update security standards to address emerging threats, evolving technologies, and organizational requirements.
Ensure security architecture and controls align with applicable Singapore Government security policies, including IM8 and the Cybersecurity Code of Practice (CCoP).

AI Security & Governance

Assess the security posture of AI and machine learning systems throughout their development, training, deployment, and operational lifecycles.
Identify and mitigate security risks associated with AI applications, large language models (LLMs), and third-party AI services.
Develop security guidelines for AI deployments, including data protection, human oversight, access controls, and incident response.
Evaluate AI-related risks involving data residency, vendor access, model behaviour, and supply chain security.

Security Automation & Continuous Improvement

Develop AI-powered tools and reusable frameworks to improve security architecture reviews, threat modelling, and risk assessments.
Identify opportunities to automate repetitive security consultancy activities.
Prototype and implement AI-assisted workflows to improve the efficiency, consistency, and quality of security assessments.
Collaborate with technical teams and security specialists to continuously improve enterprise security capabilities.

Required Skills

Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related discipline.
Minimum 8 years of relevant cybersecurity experience, with a strong focus on security architecture, risk assessment, and security consultancy.
Extensive experience designing and reviewing security architectures across cloud, on-premises, and hybrid environments.
Strong technical knowledge of cloud security, application security, identity and access management (IAM), and data protection.
Hands-on experience conducting security architecture reviews, threat modelling, and cybersecurity risk assessments.
Strong understanding of cybersecurity risk management methodologies, security controls, and compliance frameworks.
Working knowledge of Singapore Government security policies and frameworks, including IM8 and CCoP.
Familiarity with AI security concepts, machine learning security risks, and secure AI system deployments.
Ability to develop security standards, architecture guidelines, and reusable security design patterns.
Strong analytical, problem-solving, documentation, and stakeholder management skills.
Ability to communicate complex security risks and recommendations to technical and non-technical stakeholders.
Ability to independently manage multiple security consultancy engagements.

Preferred Skills

Professional certifications such as CISSP, CISM, CRISC, or equivalent.
AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP).
Experience working with Singapore Government agencies or supporting public-sector technology projects.
Experience developing AI-powered security tools, security automation workflows, or AI governance frameworks.