Head of Cloud Security

Singapore 28 days agoFull-time External
38.2k - 54.6k / mo
• Lead the design and implementation of enterprise cloud architecture solutions across Microsoft Azure, Microsoft 365, and hybrid cloud environments for client organisations • Architect secure cloud infrastructure including identity and access management (IAM), network security, data protection, and compliance frameworks aligned with industry standards (ISO 27001, SOC 2, NIST) • Conduct technical assessments and design reviews to ensure client environments meet security, performance, and scalability requirements • Develop and document cloud architecture standards, reference architectures, and technical runbooks for service delivery teams • Lead technical pre-sales activities including solution design, proposal development, and client presentations for complex cloud and security engagements • Oversee technical delivery of Microsoft Intune deployments, endpoint security configurations, and enterprise mobility solutions • Ensure alignment with Microsoft partner programme requirements and maintain technical certifications for partnership compliance • Define and execute Blue Island's technology roadmap, ensuring service offerings remain competitive and aligned with market demands • Evaluate emerging technologies including AI/ML security tools, cloud-native security platforms, and automation capabilities for integration into service offerings • Establish and manage strategic technology partnerships with vendors including Microsoft, Datadog, and security tooling providers • Provide technical governance and quality assurance across all client engagements • Mentor and develop technical capabilities within the delivery team as the company scales Technical Skills & Competencies: Cloud Architecture and Infrastructure • Microsoft Azure architecture: Virtual networks, Azure AD/Entra ID, Azure Security Center, Microsoft Sentinel, Azure Kubernetes Service (AKS), Azure DevOps • Microsoft 365 enterprise deployment: Exchange Online, SharePoint, Teams, OneDrive, Microsoft Defender suite • Hybrid cloud integration: Azure Arc, on-premises Active Directory synchronisation, hybrid identity management • Infrastructure as Code: ARM templates, Terraform, PowerShell automation, Azure CLI scripting Cybersecurity and Compliance • Microsoft Intune and endpoint security: Device compliance policies, application protection, conditional access, security baselines • Identity and access management: Entra ID Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Zero Trust architecture implementation • Security monitoring and incident response: Microsoft Sentinel SIEM, Datadog monitoring, log analytics, threat detection • Compliance framework implementation: ISO 27001, SOC 2, NIST Cybersecurity Framework, Essential Eight (Australia), CSA Singapore cybersecurity requirements Enterprise Architecture and Strategy • Enterprise architecture methodologies: TOGAF principles, solution architecture documentation, technical design authority • Digital transformation: Legacy system modernisation, cloud migration strategies, modern workplace enablement • Vendor and partner management: Microsoft Partner programme engagement, technology vendor evaluation, third-party integration