Job Description

About Us

Headquartered and listed in Singapore in 2021, CapitaLand Investment Limited (CLI) is a leading global real asset manager with a strong Asia foothold. As at 5 November 2025, CLI had S$120 billion of funds under management. CLI holds stakes in eight listed real estate investment trusts and a suite of private real asset vehicles that invest in demographics, disruption and digitalisation-theme strategies. Its diversified real asset classes include retail, office, lodging, industrial, logistics, business parks, wellness, self-storage, data centres and private credit.

Job Description

This role is responsible for leading the organisation's cybersecurity architecture, security engineering, infrastructure security, endpoint security, application security and data protection functions. The incumbent will drive the cybersecurity technology roadmap, oversee the cybersecurity platform ecosystem, and ensure security-by-design principles are embedded across infrastructure, cloud, data, AI and application initiatives.

The role will work closely with infrastructure, cloud, network, application, data, OT and business teams to strengthen the organisation's cyber resilience, reduce cyber risk and enhance security capabilities through architecture governance, technology implementation and continuous improvement of cybersecurity controls.

In addition, the role will lead team responsible for managing cybersecurity platforms, application security, data protection and enterprise security architecture.

Responsibilities

• Lead the development and execution of the organisation's cybersecurity architecture and technology roadmap, ensuring alignment with business objectives and enterprise technology strategy.
• Establish and maintain cybersecurity architecture standards, security patterns, technical guidelines and reference architectures.
• Lead security architecture reviews for infrastructure, cloud, network, endpoint, application, data and digital transformation initiatives.
• Assess emerging technologies, cybersecurity threats and new business initiatives to identify security risks and recommend appropriate controls.
• Ensure security-by-design principles are incorporated throughout solution design, development and project delivery lifecycles.
• Oversee security controls across enterprise infrastructure, cloud environments, networks and endpoints.
• Lead the deployment, configuration, administration and optimisation of cybersecurity platforms across the enterprise.
• Drive the implementation and continuous improvement of endpoint protection, hardening standards, vulnerability management and privileged access controls.
• Lead the organisation's application security programme, including secure development practices, security assessments and remediation activities.
• Oversee data protection controls including data classification, encryption, key management, DLP and privacy requirements.
• Partner with development, data and business teams to embed security controls throughout the application and data lifecycle.

Requirements

• Degree in Information Security, Computer Science, Information Technology or a related discipline.
• 5 years of cybersecurity experience with at least 2 years in a leadership or managerial role.
• Strong knowledge of:
• Security Architecture
• Infrastructure & Endpoint Security
• Cloud Security (Azure, Alibaba Cloud)
• Application Security & Secure SDLC
• Data Security & Privacy
• IAM/PAM
• Security Platforms (SIEM, EDR, DLP, Email Security, Vulnerability Management)
• AI Security and API Security
• Familiarity with frameworks such as NIST CSF 2.0, CIS Controls, ISO 27001 and relevant regulatory requirements.
• Strong stakeholder management, project delivery and vendor management experience.

Benefits

• Flexible benefits with comprehensive medical coverage for self and family
• Training and development opportunities
• Subsidised rates at Ascott serviced residences-
• Strong advocate of staff volunteerism
• Wellness programmes

Closing Statement:

At CapitaLand, we advocate fair employment practices, and recruit talents based on merit and fit with our Corporate values. We provide equal opportunity for all qualified persons and build an inclusive workplace regardless of race, gender, age, religious belief or nationality.

Only shortlisted candidates will be notified.