Worldwide Flight Services (WFS)
Senior Cyber Security Architect
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Who We Are
Headquartered in Singapore, SATS Ltd. is one of the world’s largest providers of air cargo handling services and Asia’s leading airline caterer. SATS Gateway Services provides airfreight and ground handling services including passenger services, ramp and baggage handling, aviation security services, aircraft cleaning and aviation laundry. SATS Food Solutions serves airlines and institutions and operates central kitchens with large-scale food production and distribution capabilities for a wide range of cuisines. SATS is present in the Asia-Pacific, the Americas, Europe, the Middle East, and Africa, powering an interconnected world of trade, travel and taste. Following the acquisition of Worldwide Flight Services (WFS) in 2023, the combined SATS and WFS network operates over 215 stations in 27 countries. These cover trade routes responsible for more than 50% of global air cargo volume. SATS has been listed on the Singapore Exchange since May 2000. For more information, please visit www.sats.com.sg
The Role
The Senior Security Architect is responsible for designing, reviewing, and guiding secure technology solutions across cloud, on-premises, and hybrid environments. This role works closely with infrastructure architects across applications, cloud, data, and security teams to ensure security requirements are embedded into technology initiatives from design through implementation.
The position is senior in nature, requiring strong technical depth, sound risk judgment, and the ability to influence engineering and business stakeholders. This role will contribute meaningfully to architecture standards, reusable security patterns, and secure design practices globally at SATS.
Key Responsibilities
- Lead security architecture reviews for business and technology initiatives across cloud, infrastructure, application, identity, and data platforms.
- Contribute secure solution components that align with enterprise security standards, regulatory obligations, and risk appetite.
- Partner with Infrastructure and project teams to embed security requirements early in the delivery solution/system delivery lifecycle.
- Perform threat modelling and risk assessments for new systems, major changes, integrations, and high-risk platforms.
- Define security controls for cloud, network, identity, application, endpoint, and data protection architectures.
- Translate security policies and control requirements into practical technical designs and implementation guidance.
- Contribute to reusable security architecture patterns, reference designs, guardrails, and decision records.
- Review and challenge solution designs to identify control gaps, architectural risks, and opportunities to reduce attack surface.
- Support secure cloud adoption through guidance on landing zones, segmentation, IAM, encryption, logging, monitoring, and workload protection.
- Collaborate with security operations teams to ensure new platforms generate appropriate telemetry for detection, response, and incident investigation.
- Advise technology teams on secure software development, DevSecOps, infrastructure-as-code, secrets management, and software supply chain controls.
- Support remediation planning for architecture-related risks, security findings, audit issues, and control gaps.
- Mentor junior Infrastructure and cybersecurity team members on secure design principles and practical control implementation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Job Requirements
Educational Qualifications
- College degree or equivalent professional experience
- Hold current cybersecurity certifications such as: CISSP, CISM, Microsoft, Cisco, and others.
Relevant Experience
- 7–10 years of experience in cybersecurity, infrastructure security, cloud security, application security, or related technology roles.
- 3–5 years of direct experience in security architecture, solution architecture, cloud security architecture, or security engineering.
- Proven experience reviewing or designing secure solutions in enterprise-scale environments.
- Demonstrated ability to influence technical teams and business stakeholders without relying solely on formal authority.
- Experience working with cross-functional teams, including infrastructure, cloud, application development, data, privacy, compliance, and security operations.
- Experience supporting global organizations, regulated, and/or complex environments is strongly preferred.
Knowledge & Skills
- Strong understanding of security architecture principles across cloud, infrastructure, network, application, identity, and data domains.
- Hands-on experience designing security controls in Azure, AWS, GCP, or multi-cloud environments, including landing zones, segmentation, private connectivity, workload isolation, secure configuration, encryption, and key management.
- Strong understanding of IAM and Zero Trust principles, including privileged access management, RBAC/ABAC, conditional access, federation, SSO, MFA, OAuth2, OIDC, SAML, SCIM, workload identities, and least-privilege access patterns.
- Familiarity with network and API security architecture, including firewalls, proxies, WAF, DNS security, VPN, ZTNA, micro-segmentation, secure remote access, API gateways, mTLS, rate limiting, and OWASP API Top 10 risks.
- Knowledge of secure software development and DevSecOps practices, including threat modeling, secure coding, SAST, DAST, SCA, IaC scanning, secrets scanning, dependency management, artifact signing, and CI/CD pipeline guardrails.
- Understanding of software supply chain and container security concepts, including SBOM, provenance, package integrity, image signing, Kubernetes security, admission controls, network policies, secrets handling, and runtime protection.
- Ability to define secure infrastructure-as-code and policy-as-code patterns using tools such as Terraform, Bicep, ARM templates, CloudFormation, Azure Policy, AWS SCPs, or equivalent technologies.
- Strong understanding of cryptography and data protection controls, including encryption at rest and in transit, certificate management, HSM/KMS usage, secrets management, data classification, tokenization, masking, DLP, data residency, and secure data sharing.
- Ability to map architecture decisions to common security and compliance frameworks such as NIST CSF, ISO 27001, CIS Controls, NIS2, or other relevant regulatory requirements.
- Knowledge of security monitoring and posture management capabilities, including SIEM/SOAR integration, control-to-telemetry mapping, cloud-native security tools, CSPM, CIEM, CWPP, vulnerability management, attack surface management, and configuration compliance platforms.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Personal Characteristics & Behaviours
- Influential senior individual contributor who can lead key security architecture initiatives, influence outcomes across teams, and mentor junior talent without requiring formal management authority.
- Clear and adaptable communicator who translates complex cybersecurity issues into business language for executives and practical technical guidance for engineers.
- Strategic, hands-on architect who converts high-level cybersecurity objectives into practical, scalable, and operationally supportable security solutions.
- Trusted cross-functional collaborator who bridges cybersecurity, IT, engineering, governance, and business teams to align security decisions with enterprise priorities.
- Pragmatic risk advisor who balances security, usability, cost, operational complexity, and delivery timelines while distinguishing material risks from theoretical concerns.
- Integrity-driven, results-oriented problem solver who takes ownership, works independently, escalates material risks appropriately, and proactively strengthens the organization’s security posture.
- Comfortable operating in ambiguity, helping teams make well-reasoned security decisions when requirements, risks, or technical details are incomplete.
- Continuous learner and innovator who tracks emerging threats, technologies, regulatory changes, and architecture practices to keep security capabilities current and forward-looking.
Travel Requirements
This role does not require regular business travel (generally <5%).
Core Values
We have 5 core People Values at SATS.
- Safety: Safety – it’s ingrained in our DNA
- Customer Focus: Every smile is a win for us
- Respect: We strive to listen, understand, and respect.
- Excellence: Excellence isn’t just a goal, it’s the SATS way.
- Teamwork: We don’t just collaborate. We amplify each other’s strengths.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location