Senior Manager, Cyber Architecture & Engineering

Date: 6 Sep 2023

Location: Singapore, Singapore

Company: Singtel Group

NCS is a leading technology services firm with presence in Asia Pacific and partners with governments and enterprises to advance communities through technology. Combining the experience and expertise of its 10,000-strong team across 61 specialisations, NCS provides differentiated and end-to-end technology services to clients with its NEXT capabilities of digital, cloud, platforms as well as core offerings in application, infrastructure, engineering and cyber security. NCS also believes in building a strong partner eco-system with leading technology players, research institutions and start-ups to support open innovation and co-creation. For more information, visit ncs.co. 

 

We are committed to a safe and healthy environment for our employees & customers and will require all prospective employees to be fully vaccinated.


Overview:

As part of NCS IT Cyber Security Architecture and Engineering team, you will champion the security design and build a secure enterprise, act as the subject matter expert to provide sound advice and conceptualize new security solutions to meet the business objectives.

 

Responsibilities:

  • Design and Implement Enterprise security architecture that meets business objectives.
  • Build and implement enterprise security solutions to protect against advanced cyber security threats across the organization’s diverse environment.
  • Operationalize Mitre Att&ck framework and embed it into security architecture and solution design.
  • Be the security subject matter expert and collaborate with infrastructure, application, and cloud team to enhance, configure and support existing and new security solutions.
  • Responsible for the maintenance and creation of enterprise security architecture, cyber engineering diagrams, and documentations.
  • Drive enterprise security projects to completion within the stipulated timeline.
  • Identify enterprise security gaps and provide recommendations of security controls.
  • Engage and collaborate with security vendors to conduct security PoC.
  • Responsible for the remediation of enterprise security solutions' issues.
  • Be part of the cyber security team by providing stand-by support for critical security tools used by the cyber operations team.

 

The ideal candidate should possess:

  • Degree/Diploma or higher in Computer Science, Information Systems or equivalent.
  • Minimally 12 years of experience in cyber security architecture and engineering.
  • At least one security certification is preferred, such as CISSP, Certified Information Security Management (CISM), PMP or any SANS GIAC Security Certifications.
  • In-depth understanding and experience of Windows and Linux OS.
  • In-depth understanding and experience of Mitre Att&ck framework and operationalizing it.
  • In-depth experience of Secure architecture design principles and secure by design principles.
  • Ability to correlate enterprise risk with suitable administrative, or technical security controls
  • In-depth knowledge or hands-on experiences in at least of the following 2 domains: -
    • Endpoint Extended Detection and Response (XDR) 
    • Security information and event management (SIEM)
    • Data Leakage Prevention (DLP)
    • Firewall and Intrusion detection and prevention system
    • Privileged Access Management
    • Infrastructure Hardening
  • Experience with providing operations support on enterprise security tools.
  • Experience in designing and implementing a secure infrastructure on major Cloud platform providers and knowledge of cloud security best practices and industry security requirements.
  • Ability to work independently and with minimal supervision in an enterprise environment.
  • Strong project management, problem-solving, oral and written communications skills.
  • Ability to manage 3rd party vendor engagements and drive any issues to completion.
  • Ability to collaborate with internal enterprise infrastructure or cloud engineers to deploy cyber security solutions.