Job Description This role covers both: Day 1 Security (Build / Project Implementation) Day 2 Security (Operations / Production Support) The Security Lead will work closely with Infra, System, and Software teams, InfoSec stakeholders, and external auditors to ensure the system complies with government security policies and standards. Key Responsibilities Day 1 - Project / Implementation Security 1. Security Architecture & Design Define system security architecture aligned with Singapore Government security policies.
Review application, middleware, infrastructure, and platform designs for security compliance.
Conduct threat modelling and risk assessments map risks to mitigating controls.
Translate policy requirements into actionable technical controls across the stack.
2. Compliance & Governance Ensure compliance with: IM8 / Government security policies Whole‑of‑Government (WOG) security requirements PDPA (where applicable)
Establish and oversee cyber security governance a...