Cybersecurity Architect

About the role

The Cybersecurity Architect will work closely with the CISO to design, mature and maintain the organisation's security architecture. You will lead the implementation of security solutions, monitor operational processes and produce reports that assess the effectiveness of security operations.

Key responsibilities

• Provide independent assessments of security operations adequacy, effectiveness and sustainability.
• Ensure secure configuration and operation of security hardware and software.
• Incorporate changes to security policy documentation as directed by the Head of Department.
• Partner with Information Security and IT teams to verify key security controls and recommend improvements.
• Collaborate with the security team to analyse operations and suggest enhancements.
• Maintain and monitor network and host intrusion detection and prevention technologies.
• Support forensic analysis, incident management, root‑cause identification and after‑action reporting for high‑impact incidents.
• Maintain the organisation's cybersecurity framework, map it to other frameworks and track related action plans.
• Identify risks to information assets through risk analysis.
• Work with business and IT to specify cybersecurity controls and convey requirements to users and custodians.

Required profile

• Bachelor's or Master's degree in IT, Information Systems or Computer Science from an accredited program.
• Relevant certifications such as CISSP, CISM, GIAC or CEH; vendor certifications (e.g., Cisco, Microsoft, Symantec, Oracle, McAfee) are a plus.
• Minimum 15 years of experience, including at least 7 years in information/cyber security and experience in networks, IT audit or risk.
• Strong knowledge of the NIST Cybersecurity Framework and financial services security requirements in the USA, UK and Singapore.

Required skills

• NIST Cybersecurity Framework
• Network security, firewalls and perimeter security
• Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS)
• Security hardware and software configuration
• Forensic analysis and security incident management
• Risk analysis and mitigation
• Mapping to multiple security frameworks and internal policies
• Vendor technologies (Cisco, Microsoft, Symantec, Oracle, McAfee, etc.)