Cybersecurity Lead (Security Architecture & Threat Management)

About the Role:
We are looking for an experienced Cybersecurity Lead (Security Architecture & Threat Management) to strengthen our cybersecurity architecture and organisational resilience.

The role will be responsible for driving cybersecurity architecture standards, security-by-design principles, architecture governance and threat and vulnerability management across the organisation. You will work closely with technology teams, business units and key stakeholders to ensure cybersecurity requirements are effectively incorporated into technology solutions and transformation initiatives.

Key Responsibilities:

• Evaluate systems and solutions from a cybersecurity architecture perspective and recommend appropriate security measures.

• Develop and implement cybersecurity architecture standards, guidelines and security design requirements.
• Review solution architectures and provide security guidance for new systems, platforms, cloud solutions and major technology initiatives.
• Conduct architectural risk assessments, security design reviews and solution validation.
• Advise project, architecture and engineering teams on areas including system hardening, network segmentation, identity security, cloud security and application security.
• Lead cybersecurity assessments and architecture-related security improvement initiatives.
• Monitor architecture compliance and coordinate remediation of identified security gaps.
• Lead threat intelligence and vulnerability management activities, including vulnerability prioritisation, remediation tracking and reporting.
• Support cybersecurity incident response planning, exercises and post-incident reviews.
• Coordinate penetration testing activities and track remediation of identified findings.
• Maintain relevant cyber risk, threat and attack-surface information.
• Support cybersecurity compliance, audits, assessments and regulatory requirements.
• Work closely with internal stakeholders, vendors and partners to ensure security solutions meet organisational and regulatory requirements.

Requirements:

• Bachelor's Degree in Cybersecurity or a related discipline.
• Minimum 6 years of hands-on cybersecurity experience, including at least 3 years in cybersecurity architecture or security design within complex IT environments.
• Strong experience in enterprise security architecture, security design reviews and governance.
• Experience designing and evaluating security controls across cloud and on-premise environments.
• Good understanding of cybersecurity frameworks such as NIST CSF, ISO 27001 and CIS Controls.
• Experience in threat and vulnerability management.
• At least one recognised senior-level cybersecurity certification such as CISSP, CISM or CISA, or equivalent.
• Knowledge of cloud security architecture across AWS, Azure or Google Cloud environments.
• Strong stakeholder management and communication skills, with the ability to communicate cybersecurity risks to both technical and non-technical stakeholders.
• Experience in healthcare, government or Critical Information Infrastructure environments would be advantageous.
• Proficiency in Chinese would be advantageous as the role may support engagements in China.