Cybersecurity Architect

Thales is a global technology leader trusted by governments institutions and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space cybersecurity and digital identity were driven by a mission to build a future we can all trust.

Organisation Context

The Airspace Mobility Solutions (AMS) business part of the Global Business Unit Land and Air Systems is providing leading edge Air Traffic Management (ATM) Unmanned Traffic Management (UTM) Security and Digital Aviation solutions for the Commercial and Defence sectors.

The AMS business manages 11% of the worlds airspace and with revenues of over 500 million Euros worldwide is the global market leader in airspace management Singapore the business focus is the delivery and support of ATM solutions in Asia Pacific region.

Role Description

As a Cybersecurity Architect in Thales you are responsible for the planning and management of cybersecurity-related activities on bids and projects you are assigned to for the delivery of acceptable cyber security outcomes for our internal and external customers.

In this role you are expected to:

• Advise on and manage cybersecurity risks for customers within the scope of assigned bids and projects

• Be a subject-matter expert on cybersecurity within system technical and operation domains and across the full life cycle

• Drive security governance and processes in line with Thales policies and guidelines

• Increase the security capability and maturity of the organisation

• Mentor and develop junior cyber security team members

• Be a cyber security champion

Responsibilities

As a Cybersecurity Architect you are responsible on assigned bids and projects for:

• Understanding customer context core information assets and business impact from loss of key attributes

• Capturing explicit system security requirements and constraints from the customer regulators risk assessments and the Thales organisation

• Assessing and evaluating cyber risks developing a detailed security management plan and maintaining the cybersecurity risk register

• Developing system-level security requirements and a security architecture and leading the development of detailed design artefacts

• Developing work breakdown structures specifying deliverables and creating detailed technical estimates that include assumptions risks and opportunities that support commercial and financial outcomes

• Liaising with external certification bodies including attending or facilitating regular security working groups and supporting external security assessments

• Leading the production of detailed documentation that supports cybersecurity accreditation and certification of systems

• Tasking and/or supervising security engineers and solution architects on security activities

• Providing advice to Thales and its customers on general security related issues as required

• Contributing to security assurance planning and reporting and reviewing test cases and test results

• Supporting audits and investigations of cyber-related incidents and accidents

• Attending and participating in regular team bid and project meetings.

• Attending and participating in internal and external technical reviews

• Exploring and developing creative approaches that both satisfy requirements and work within constraints

• Providing advice and clarification to bid and project teams

These activities will be conducted in compliance with the Thales quality management system

It is important that in this position you build good internal and external relationships that result in a positive measurable impact on the project as well as the broader cybersecurity team the Thales business and our customers. It is essential that all interactions and deliverables are professional and support the organisations objectives.

Knowledge Skills & Experience

To be successful in your role you will have demonstrated and/or acquired the following knowledge and experience:

Attributes:

• Analysis and judgement: relate and compare data from different sources; identify problems issues or relations then develop and prioritise courses of action or make decisions based on factual information and logic.

• Ability to develop and present security architecture artefacts contributing to the system solution with appropriate trade-offs to reduce or avoid risk and any performance impact to safety.

• Customer service orientation: pro-actively develop customer relationships by listening to and understanding the customer (both internal and external) requirements; anticipating and providing solutions to meet customer needs; giving high priority to customer satisfaction.

• Organisation: ability to effectively structure work for self for the most efficient accomplishment of a specific task(s).

• Practical learning: assimilating and applying in a timely manner new job-related information that may vary in complexity.

• Teamwork/collaboration: working effectively with team/work groups or those outside formal line of authority (e.g. peers senior managers) to accomplish organisational goals; taking actions that respect the needs and contributions of others; contributing to and accepting the consensus; subordinating own objectives.

• Technical/professional knowledge: keeping abreast of current developments and trends in areas of expertise.

Qualifications:

• Degree in Engineering Computer Science or related discipline majoring in Cybersecurity

• Postgraduate studies in Cybersecurity (Desirable)

Essential:

• 7 years of proven experience in the Cybersecurity field

• Cyber Industry qualifications (e.g. CISSP CompTIA Security CCNA Security GIAC SABSA or similar)

• Strong knowledge in Cybersecurity solutions (e.g. IAM PAM SIEM EDR Keys Firewall)

• Strong knowledge in Cybersecurity engineering activities

• Strong Knowledge of Security standards such as ISO 27001 and security local regulations (e.g. CCOP and IM(ICT&SS) for Singapore).

• Strong knowledge in Vulnerability and risk management

• Experience with authoring/reviewing Security plans (e.g. System Security Plan Security incident Response Plan Security Management Plan)

• Experience with authoring/reviewing Technical Documentation

• Technical experience with the security-based aspects and secure implementation of Linux and Windows based systems network devices and firewalls.

• Demonstrated ability to achieve effective outcomes in a multidiscipline multi-culture environment

• A positive attitude combined with excellent interpersonal and motivational skills.

Desirable:

• Knowledge of Systems Engineering Lifecycle and relevant standards (e.g. ISO/IEC15288)

• Experience in System certification and accreditation

• Experience in system hardening based on CIS Benchmarks or DISA STIG frameworks.

• Experience with System Engineering Tools (e.g. DOORS / Polarion / Jira / MBSE)

• Experience in ATM Domain and related standards (e.g. ICAO Eurocontrol or safety critical systems.

• Experience in working in a Scaled Agile Framework (SAFe)

General / Special Requirements

• Developing and maintaining a harmonious work environment in all departments that you are working with by upholding Thales key values.

• Be an advocate for diversity and inclusion who will be actively involved in implementing change initiatives to achieve our diversity goals

• Be an advocate for a culture of continuous improvement

• Be an advocate for Accountability transparency and curiosity

• Comply with all relevant company Occupational Health Safety and Environmental policies and framework and work practices with the intent of preventing or minimising accidental exposures to self colleagues visitors and/or the environment and to ensure a safe work practises at all times.

• Comply with all relevant Company policies and procedures.

SPECIAL REQUIREMENTS

• Occasional international travel may be required

• Hold or eligible to hold Singapore CAT2 Clearance

At Thales were committed to fostering a workplace where respect trust collaboration and passion drive everything we do. Here youll feel empowered to bring your best self thrive in a supportive culture and love the work you do. Join us and be part of a team reimagining technology to create solutions that truly make a difference for a safer greener and more inclusive world.