Summary of the position:


The Cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization's systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.


Main responsibilities:

• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed
• Production Level 3 escalation  support for Network and Security infrastructure.

Legal and Regulatory Responsibilities:

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain

Job Specific Environment and/or Organization

·         Fluent in English written and spoken

·         Working hours will be in rotating shifts and primarily to cover Europe business hours

·         On-call support will be expected on a rotational basis on both weekdays and weekends

Requirements

Mandatory track record

• Minimum 08 years of experience in managing IT systems environment with about 05 years of experience in financial institutes.

Either have a Bachelors’ degree in any of the below:
-       Computer Science

-       Information Technology

-       Programming & Systems Analysis

-       Science (Computer Studies)

•  minimum 3 years’ of work experience as a Cybersecurity Architect or Engineer.
• Subject matter expert on Systems , Network and Security.
• Knowledge and/or hands on working experience with emerging technologies.
• Excellent communication, interpersonal and logical skills.
• Customer service oriented and a strong team player.
• Ability to work under pressure and a commitment to solving issues.

Bachelor and above in relevant discipline 

Cisco
ACI, Nexus, Catalyst, DNAC, ISE , iOS, NXOS
Arista
Switches, EOS
Fortinet
Firewall, IPS
F5
LTM, ASM,  TMOS
Infoblox
DNS, DHCP
Skyhigh
Proxy
Ivanti
Remote access
Checkpoint
Firewall, MDS
Trendmicro
IPS/IDS

Programming
Python/Bash/Ansible
Tools
Wireshark/Tshark/Netflow