Senior Information Security Specialist

About the Role

Joining Singtel means becoming part of an environment where technology meets meaningful purpose. Singtel aims to empower every generation by connecting people, businesses, and communities through reliable and innovative digital technologies, such as AI, 5G, cloud, and cybersecurity solutions. This senior role focuses on independently reviewing and ensuring the security of various technology projects, providing architecture and risk guidance, and supporting secure implementation aligned with corporate standards and regulations.

Key Responsibilities

• Conduct detailed security risk evaluations for new systems, applications, infrastructure updates, and vendor engagements.
• Ensure technology initiatives align with internal policies, standards, and governance, identifying any deficiencies proactively and recommending appropriate fixes.
• Examine and confirm security designs in areas like IT infrastructure, cloud platforms, network security, identity and access control, data protection, and application security.
• Review design documents and technical controls to verify risk treatment before deployment.
• Perform threat modelling on critical systems to uncover potential attack avenues and control weaknesses, proposing mitigation strategies.
• Collaborate with IT, application, and business teams to offer risk insights for projects and special reviews.
• Define and promote secure architecture frameworks and security design patterns to ensure consistent and scalable security implementations.
• Lead ongoing enhancements to risk assessment and design review processes, improving quality and efficiency.
• Advocate for new or improved security controls and architecture practices based on the latest threats, regulations, and industry standards, and support their adoption.

Required Qualifications and Expertise

• Degree or diploma in Information Technology, Computer Science, Engineering, or related disciplines.
• Minimum of six years in security assessment, cybersecurity, or similar IT roles.
• Proven expertise in systems security, network security, identity access management, or virtualization security.
• Experience in system integrator or consulting settings, particularly with multi-client or complex projects, is beneficial.
• Hands-on skills in security administration, solution design, and implementation across servers, applications, and telecommunications networks.
• Practical knowledge of applying Zero Trust architecture principles in complex enterprise setups.
• Competence in threat modelling and technology risk assessments, including threat identification, control evaluation, and proposing mitigation tactics.
• Capability to interpret and implement security baselines and standards consistent with regulatory and enterprise requirements.
• Proficiency in validating solutions against security requirements, identifying gaps, and suggesting remediation.
• Professional certifications like CISSP or CISM are preferred.
• Strong analytical, problem-solving, and negotiation skills, along with effective time management and prioritization.
• Resilience, adaptability to fast-changing environments, and a mindset geared to continuous improvement.
• Ability to work independently with remote teams, exercising sound judgment and initiative.

Additional Information

This role offers the chance to contribute to transformative projects within a leading telecom company focused on innovation and empowerment. Candidates will engage with diverse teams to safeguard digital ecosystems and help shape secure, future-ready technologies.