Principal Information Security Partner

About the role

We are seeking a dedicated Security Partner to join our team in Singapore, focusing specifically on our growing engagements in the Singapore Public Sector. This is a unique and critical role, designed to strengthen our security posture, deepen our partnerships in the public sector, and ensure successful and secure delivery.

You will be a trusted advisor, bridging the gap between technical delivery and the demanding security requirements of these clients. You will actively participate in the leadership teams for our Singapore Public Sector accounts and you will help to ensure appropriate governance of security on these accounts, navigating the special confidentiality needs that public sector work often entails. You will report to the BISO for APAC and provide regular reporting to the Thoughtworks APAC Security Governance Committee.

Due to the nature of the projects and specific client security clearance, this role requires the successful candidate to be a Singapore Citizen or PR of Singapore

Job responsibilities

As a Security Partner for Singapore public sector projects, you will provide expert security guidance and leadership for all Thoughtworks accounts and projects within the Singapore public sector portfolio.

- Security Governance & Reporting: Take ownership of establishing and driving a comprehensive security governance framework tailored to the needs of Singapore public sector accounts. This includes defining and operationalizing key security metrics, identifying and tracking emerging risks, and ensuring timely and accurate reporting to the BISO and APAC Security Governance Committee.

- Incident Management: Lead and coordinate the response to security incidents, including containment, eradication, recovery, and post-incident analysis. Ensure timely and accurate communication of security incidents to relevant stakeholders.

- Risk Management: Identify, assess, and manage information security risks specific to Singapore public sector projects, proactively developing and implementing mitigation strategies.

- Client Engagement & Partnership: Develop strong relationships with key stakeholders within the Singapore public sector, including security teams and relevant agencies, to understand their evolving security requirements and build trust.

- Compliance & Audit Support: Ensure adherence to relevant security policies, standards, and regulatory requirements. Support internal and external audits.

- Technical Consulting: Provide technical security consulting to delivery teams, embedding security best practices, architectural patterns, and compliance throughout the SDLC. Actively participate in problem-solving by providing timely and effective security solutions.

- Enable Knowledge Sharing: Drive the scalable enablement of Security Champions within delivery teams, empowering them to embed security best practices into their day-to-day work.

Job qualifications

We are looking for someone who is: