Principal Information Security Partner

We are seeking a dedicated Security Partner to join our team in Singapore, focusing specifically on our growing engagements in the Singapore Public Sector. This is a unique and critical role, designed to strengthen our security posture, deepen our partnerships in the public sector, and ensure successful and secure delivery. 

You will be a trusted advisor, bridging the gap between technical delivery and the demanding security requirements of these clients. You will actively participate in the leadership teams for our Singapore Public Sector accounts and you will help to ensure appropriate governance of security on these accounts, navigating the special confidentiality needs that public sector work often entails. You will report to the BISO for APAC and provide regular reporting to the Thoughtworks APAC Security Governance Committee.

Due to the nature of the projects and specific client security clearance, this role requires the successful candidate to be a Singapore Citizen or PR of Singapore

Job responsibilities

As a Security Partner for Singapore public sector projects, you will provide expert security guidance and leadership for all Thoughtworks accounts and projects within the Singapore public sector portfolio.

• Security Governance & Reporting: Take ownership of establishing and driving a comprehensive security governance framework tailored to the needs of Singapore public sector accounts. This includes defining and operationalizing key security metrics, identifying and tracking emerging risks, and ensuring timely and accurate reporting to the BISO and APAC Security Governance Committee.
• Incident Management: Lead and coordinate the response to security incidents, including containment, eradication, recovery, and post-incident analysis. Ensure timely and accurate communication of security incidents to relevant stakeholders.
• Risk Management: Identify, assess, and manage information security risks specific to Singapore public sector projects, proactively developing and implementing mitigation strategies.
• Client Engagement & Partnership: Develop strong relationships with key stakeholders within the Singapore public sector, including security teams and relevant agencies, to understand their evolving security requirements and build trust.
• Compliance & Audit Support: Ensure adherence to relevant security policies, standards, and regulatory requirements. Support internal and external audits.
• Technical Consulting: Provide technical security consulting to delivery teams, embedding security best practices, architectural patterns, and compliance throughout the SDLC. Actively participate in problem-solving by providing timely and effective security solutions.
• Enable Knowledge Sharing: Drive the scalable enablement of Security Champions within delivery teams, empowering them to embed security best practices into their day-to-day work.

Job qualifications

We are looking for someone who is:

• A Lead or Principal technologist experienced with executive-level communications and relationship building, and a solid understanding of software development, architecture, and cloud technologies.
• Eligible to obtain and maintain Singapore government security clearance.

The ideal candidate would have:

• Strong prior experience in information security or cyber security, with exposure to risk management, security governance, and technical security implementation in software delivery contexts, specifically within application security or cloud infrastructure security.
• A proven track record of translating theoretical security frameworks and compliance policies into practical, hands-on implementation strategies with engineering teams.
• Ability to lead effectively and manage communication with a variety of groups and stakeholders in Singapore and across APAC.
• Excellent Communication & Consulting Skills: Ability to articulate complex security concepts clearly to technical and non-technical audiences, influence stakeholders, and build strong client relationships.
• Proactive & Solutions-Oriented Mindset: Ability to anticipate security challenges and proactively develop practical, effective solutions.
• Understanding of Thoughtworks' culture, ways of working, and technical and non-technical aspects of software delivery.

Highly desirable:

• Experience in the Public Sector: Familiarity with the security landscape, regulations, and operational nuances of working with public sector entities, particularly in Singapore.
• Relevant Certifications: Industry-recognized security certifications (e.g., CISSP, CISM, GSEC) are a plus.