Cybersecurity & Infrastructure Audit Lead Job at Eames Consulting (Singapore)

IT Infrastructure Lead Engineer

We are seeking a highly accomplished Lead Systems Engineer to serve as a technic...

Location

Australia , Melbourne

Salary:

Not provided

Service Stream

Expiration Date

Until further notice

Requirements

Exceptional verbal and written communication skills
demonstrated ability to 'explain complex topics simply' to diverse audiences
A proactive approach to security validation, ensuring all infrastructure aligns with the ACSC Essential Eight and modern cybersecurity frameworks
7+ years in Systems Engineering, with at least 3 years in a Lead or Senior capacity managing enterprise-scale hybrid environments
Expert knowledge of Windows Server (2016-2022), Windows Desktop, and high-availability networking protocols (BGP, OSPF, VLANs)
Must hold, or be eligible to obtain, an Australian Government Baseline Security Clearance (requires Australian Citizenship)

Job Responsibility

Act as a primary advisor to the leadership team, possessing the ability to articulate complex technical concepts to non-technical stakeholders with clarity and precision
Contribute to the development and execution of a multi-year IT strategy that aligns with organizational growth and security objectives
Conduct regular audits of Microsoft 365 licensing (Business vs. Enterprise) and cloud consumption (AWS/Azure) to identify cost-saving opportunities and ensure maximum return on investment
Lead by example, fostering a culture of high performance, thorough documentation, and continuous improvement within the engineering team
Provide expert-level administration of the Microsoft 365 tenant, with a focus on Intune (Endpoint Manager) for Autopilot and compliance, SharePoint Online architecture, and Exchange Online security
Act as the primary architect for Entra ID (Azure AD). Oversee the lifecycle of Enterprise Applications, including SAML/OIDC SSO integrations, App Registrations, and Conditional Access policies to ensure secure, seamless user authentication
Architect and manage Zscaler (ZIA & ZPA) environments to provide secure, seamless access to internet and private resources, replacing traditional VPN dependencies
Design and optimize our primary AWS footprint, focusing on Application Load Balancers (ALB), VPN Gateways, and Route 53. Maintain and govern Azure workloads and Entra ID (Azure AD) integrations
Oversee the integrity of Active Directory, Group Policy (GPOs), DHCP, and DNS. Manage the Microsoft PKI (AD CS) environment to support RADIUS (NPS) and certificate-based authentication (802.1X)
Drive operational efficiency through advanced PowerShell scripting and API integrations (Microsoft Graph). Manage and maintain Docker container environments for modern application delivery

What we offer

Flexible working – We genuinely consider all flexibility requests
Growth – Career development opportunities across our expanding business
Discounts – Access to hundreds of major retailers including Woolworths, Airbnb, JB Hi-Fi, and Bupa
Paid leave – Parental, cultural, community service, study, corporate volunteering, and purchased leave
Culture – A workplace that values diversity, inclusion, and celebrates excellence

Fulltime

Lead Auditor - Cybersecurity Assurance

General Motors Audit Services (GMAS) is seeking a Lead Auditor, Cybersecurity As...

Location

United States , Detroit

Salary:

Not provided

General Motors

Expiration Date

Until further notice

Requirements

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field (or equivalent related experience)
5+ years of experience in IT audit, cybersecurity, risk management, or technology assurance, including leading engagements and guiding teams through planning, testing, and reporting
Strong understanding of cybersecurity and technology risk, including evaluating confidentiality, integrity, and availability (CIA) across complex, interconnected systems
Strong knowledge of internal controls and risk frameworks such as NIST CSF, NIST 800-53, COBIT, ISO 27001, or similar frameworks
Understanding of technology infrastructure and operations (e.g., endpoint/server hardening, monitoring, backup/recovery, and change/release practices)
Experience assessing controls across core cybersecurity domains such as Identity & Access Management (IAM), privileged access, logging and monitoring, incident response, backup and recovery, vulnerability management, and security configuration controls
Strong written and verbal communication skills
Demonstrated ability to work independently, exercise sound judgment, manage multiple priorities, and deliver results in a fast-paced environment
Domestic travel: 5%–10%. International travel: possible

Job Responsibility

Lead end-to-end cybersecurity assurance engagements, including scoping, planning, fieldwork, issue development, and reporting
Evaluate the effectiveness of cybersecurity controls across key risk areas such as identity and access management, logging and monitoring, vulnerability management, incident response, backup and recovery, and security configuration
Apply a risk-based perspective to identify control gaps, emerging threats, and opportunities to improve cybersecurity resilience
Review testing workpapers and evidence to ensure conclusions are clear, supportable, and aligned to audit standards and methodology
Develop concise, executive-ready reports that clearly articulate risk, root cause, and practical corrective actions
Present results and themes to business and technology leaders, including senior management, and align remediation priorities
Coach and support team members throughout the audit lifecycle, including testing strategy, issue validation, and stakeholder communication
Build strong working relationships with stakeholders across cybersecurity, IT, privacy, compliance, and other relevant functions
Contribute to continuous improvement of the cybersecurity assurance program, including risk assessment, planning, and reusable testing approaches
Monitor remediation activity and validate that agreed actions appropriately address identified risk

Fulltime

Cybersecurity Engineer / Team Lead

The Senior Cybersecurity Engineer / Team Lead provides technical leadership and ...

Location

United States , Arlington

Salary:

103275.00 - 239062.00 USD / Year

NTT DATA

Expiration Date

Until further notice

Requirements

Masters Degree, One-and-one-half (1.5) years of additional experience can substitute for one (1) year of a typical degree program
Minimum 10 years' experience performing the cybersecurity and team lead tasks/responsibilities listed above
Ability to obtain and maintain a public trust clearance

Job Responsibility

Lead full lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment
Ensure compliance with federal security standards such as FISMA, HIPAA, and agency-specific security policies
Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews
Oversee enterprise vulnerability scanning operations using tools such as Nessus and agency-approved scanners
Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams
Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership
Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies
Support security audits, penetration tests, and secure configuration enforcement
Lead coordination with internal security teams, IT operations, legal/compliance, and government stakeholders to ensure proper handling, documentation, and reporting
Use enterprise security tools (e.g., SIEM platforms, endpoint protection, IDS/IPS) to monitor events and support investigations

What we offer

medical insurance
dental insurance
vision insurance
flexible spending or health savings account
life and AD&D insurance
short and long term disability coverage
paid time off
employee assistance
participation in a 401k program with company match
additional voluntary or legally-required benefits

Fulltime

Cybersecurity Governance Senior Lead

Large scale project working with Global; Career advancement opportunities; Uniqu...

Location

Japan , Osaka

Salary:

9000000.00 - 15000000.00 JPY / Year

Randstad

Expiration Date

December 30, 2026

Requirements

7–10+ years of experience in security engineering, infrastructure security, systems administration, or a closely related technical role, with demonstrated progression into senior-level responsibility
5+ years of hands-on expertise with Active Directory, including user and group administration, Group Policy management, delegation models, and securing privileged access
Experience supporting privileged access management (PAM) and credential vaulting solutions (Netwrix, Cyberark, etc.), including onboarding systems, access workflows, and operational support
Hands-on experience securing Windows and/or Linux server environments, including system hardening, patching workflows, and coordinating remediation of infrastructure vulnerabilities
Experience supporting governance and audit activities by producing system evidence, access-related data, and technical documentation for access reviews, entitlement validation, and audit requests
Strong reading and writing in English with at least conversational English
Security certifications such as CISSP, CISM, GIAC, or equivalent, or equivalent hands-on experience
Ability to translate security requirements into practical technical solutions, balancing risk reduction with operational realities
Familiarity with security frameworks or standards such as PCI, NIST, ISO 27001, CIS Controls, and/or SOX-related IT controls
Working knowledge of networking fundamentals, including TCP/IP, DNS, firewalls, segmentation, and secure connectivity concepts

Job Responsibility

Large scale project working with Global
Career advancement opportunities
Unique work environment with good benefits

What we offer

健康保険
労災保険
日曜日
土曜日
祝日

Fulltime

IAM Engineer, Ford Energy

At Ford, you’ll work on ideas that matter, alongside passionate people who want ...

Location

United States , Glendale Junction

Salary:

74300.00 - 144900.00 USD / Year

Ford Motor Company

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or Information Technology or 5+ years of experience in Identity and Access Management (IAM) engineering or architecture
Practical experience with enterprise IAM/IdP platforms (e.g., Okta, Ping Identity, Microsoft Entra ID/Azure AD) and PAM solutions (e.g., CyberArk, HashiCorp Vault)
Demonstrated experience with OAuth 2.0, OIDC, SAML, LDAP, and Active Directory structures
Strong communication skills with the ability to navigate cross-functional engineering and IT teams

Job Responsibility

Lead the technical design, deployment, and local governance of IAM frameworks for Ford Energy, collaborating with Enterprise Architects for final design approval
Define and maintain testable IAM requirements for cloud platforms, SCADA systems, and edge devices, ensuring traceability from concept to deployment
Establish secure identity lifecycle processes (provisioning, de-provisioning, and transfer) for internal employees, external partners, and utility customers
Implement and secure modern authentication (MFA, SSO, Passwordless) and federation standards (OIDC, OAuth 2.0, SAML 2.0)
Design secure machine-to-machine (M2M) authentication and API authorization mechanisms for connected BESS assets and grid controllers
Deploy and manage Privileged Access Management (PAM) solutions to secure high-risk administrative access to critical infrastructure
Ensure IAM architectures comply with industrial standards such as NERC CIP, NIST SP 800-82, and Ford's global cybersecurity policies
Lead access reviews, vulnerability assessments, and remediation plans for IAM-related risks
Develop technical security case materials, IAM documentation, and evidence for design gates, audits, and compliance reviews
Collaborate with software, cloud platform, OT network, and physical security teams to align identity strategies across IT and OT environments

What we offer

Immediate medical, dental, vision and prescription drug coverage
Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
Vehicle discount program for employees and family members and management leases
Tuition assistance
Established and active employee resource groups
Paid time off for individual and team community service
A generous schedule of paid holidays, including the week between Christmas and New Year's Day
Paid time off and the option to purchase additional vacation time

Fulltime

SbD Security Architect - AI

You’ll play a key role in shaping how secure, responsible AI is built and delive...

Location

United Kingdom , Newbury

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

You bring experience in security architecture within IT, cloud, digital, or network environments
You have hands-on exposure to AI/ML systems, data platforms, or AI-enabled product design (even if you’re not a developer or data scientist)
You understand AI-specific risks and can confidently translate them into meaningful security controls and business decisions
You’re comfortable working across complex, fast-paced environments with multiple stakeholders and competing priorities
You can review architectures at both high-level and detailed design, offering clear and actionable guidance
You have a strong grasp of secure design principles, threat modelling, risk management, and zero trust concepts
You communicate with clarity and empathy, making complex AI security topics easy to understand for non-technical audiences
You enjoy collaborating, influencing, and building strong partnerships across teams and senior stakeholders
You bring a forward-thinking mindset and stay curious about evolving AI and cybersecurity trends
You take a pragmatic, risk-based approach—balancing protection with business needs

Job Responsibility

Define and evolve secure architecture patterns for AI and GenAI systems, covering platforms, APIs, data pipelines, and model environments
Embed security into the design of AI solutions by identifying and mitigating risks such as data leakage, prompt injection, and model misuse early in the lifecycle
Lead Secure by Design (SbD) assessments for AI initiatives, ensuring the right level of review and controls based on risk
Collaborate with Cloud, Data, Networks, and Digital teams to ensure secure configuration of AI infrastructure, including MLOps and compute environments
Guide programmes and product teams with clear, practical recommendations that balance security, delivery, and innovation
Drive compliance with regulatory, legal, and internal frameworks (including GDPR, TSA, and Baseline Security Requirements)
Contribute to AI security standards, policies, and best practices—helping shape how responsible AI is delivered at scale
Act as a trusted subject matter expert, influencing stakeholders across local and group teams to adopt secure AI practices
Partner with Cyber Defence, Risk, Audit, and Compliance teams to ensure seamless end-to-end AI risk management
Support audit readiness by providing evidence, insights, and clear security narratives for AI systems

What we offer

great pay
bonuses
up to 28 days off plus bank holidays
paid time for charity work
discounts
vouchers
pension plan
amazing learning tools
top-notch parental leave policies

Fulltime

Principal, Security Strategy

Innovation Starts With You Propel your career at Belden, where innovation creat...

Location

United States , Carmel

Salary:

170000.00 - 200000.00 USD / Year

Belden, Inc

Expiration Date

Until further notice

Requirements

Bachelor's degree in computer science, engineering, cybersecurity, or related field (advanced degree preferred.)
12+ years in cybersecurity strategy, product strategy, security architecture, or security leadership in networking/industrial/critical infrastructure contexts.
Demonstrated ability to influence executive stakeholders and drive cross-functional strategic initiatives without direct authority.
Strong working knowledge of network security, identity/policy concepts, and security telemetry/monitoring
familiarity with IT/OT convergence challenges.
Excellent communication skills: can turn complex security topics into clear business decisions and narratives.
Strong networking fundamentals (switching/routing, VLANs, ACLs, NAT, VPNs, firewalls) and security fundamentals (identity, certificates, logging, vulnerability management).
Experience in creating technical / thought-leadership documentation such as white papers, keynotes, blog posts, videos, podcasts, etc. surrounding the OT security topic.
Ability to work across teams and influence outcomes without direct authority.
OT/ICS security experience (industrial networks, Purdue model, segmentation strategies, remote access patterns for plants, SIEM, etc.)

Job Responsibility

Develop and maintain Belden's multi-year security strategy and strategic narrative aligned to company growth and target verticals.
Identify security market inflection points (OT/ICS cybersecurity, convergence, secure remote access, segmentation, visibility, managed services) and recommend strategic responses.
Establish executive-ready points of view, strategy decks, and internal alignment materials.
Partner with Product Management to translate strategy into portfolio priorities and roadmap themes.
Lead build/buy/partner assessments
support M&A and partnership diligence from a security market/technology standpoint.
Define strategic requirements for platform capabilities (identity, policy, telemetry, analytics, secure-by-design processes).
Engage strategic customers to understand risk drivers and buying criteria. Represent Belden as an OT security Subject Matter Exprt (SME).
Build relationships with key ecosystem players (technology partners, system integrators, cloud/edge platforms) and help shape joint-value propositions.
Support executive briefings, key pursuits, and escalations where security strategy is central.

What we offer

health/dental/vision
long term/short term disability
life insurance
HSA/FSA
matching retirement plans
paid vacation
parental leave
employee stock purchase plan
paid leave for volunteer work in your community
training opportunities

Fulltime

Information Systems Security Manager (ISSM)

We are seeking a highly skilled and motivated Information Systems Security Manag...

Location

United States , Crane

Salary:

83037.47 - 199537.81 USD / Year

Arcfield

Expiration Date

Until further notice

Requirements

BS 5-7 Years Experience, MS 3-5, PhD 0-2 in Information Technology, Cybersecurity, Computer Science, or a related field (Master’s degree preferred)
Experience in information security, cybersecurity, or related roles, with at least 2+ years in a leadership or managerial role
A GSLC or CISSP or CISM or CAP or or CASP is required
Must possess an active DoD Secret clearance, with the ability to obtain a TS clearance
Strong understanding of information security principles, risk management, and vulnerability management
Experience with regulatory and compliance frameworks (e.g., NIST, ISO 27001, PCI-DSS, SOX, GDPR, HIPAA)
Proficiency in security tools such as eMASS, ACAS, SIEM, firewalls, IDS/IPS, DLP, and endpoint protection platforms
Knowledge of cloud security best practices (e.g., Azure, AWS, GCP)
Strong problem-solving, decision-making, and analytical skills
Excellent verbal and written communication skills to work with technical and non-technical stakeholders

Job Responsibility

Develop, implement, and maintain the organization's information security policies, strategies, procedures, and guidelines
Ensure compliance with industry frameworks (e.g., NIST, ISO 27001, GDPR, CMMC, HIPAA, etc.) and government regulations
Establish strong security governance practices and manage risk assessment processes
Risk Management and Compliance Oversight for IT infrastructure and program requirements
Act as the primary point of contact for audits, assessments, and compliance-related activities
Ensure compliance with internal policies, regulatory requirements, and contractual security obligations
Lead efforts to achieve and maintain required certifications (e.g., ISO27001, SOC 2, CMMC)
Develop and maintain an incident response plan
Lead investigation and resolution of security incidents, including root cause analysis and remediation steps
Collaborate with external vendors, law enforcement, or forensics teams to address breaches when necessary

What we offer

Health Insurance
Life Insurance
Paid Time Off
Holiday Pay
Short Term and Long-Term Disability
Retirement and Savings
Learning and Development opportunities
Wellness programs

Fulltime

Select Country

Cybersecurity & Infrastructure Audit Lead

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?