Security & DevOps Manager

Key Responsibilities

• Data Sovereignty & Access Governance (The Gatekeeper) Act as the Primary Custodian of production environment credentials (Root Keys, Master Passwords) for AWS/Alibaba Cloud. Review and Approve privileged access requests and deployment tickets from global engineering teams; ensure no unauthorized cross-border access occurs. Manage Bastion Host (Jumpserver) policies to ensure all production operations are logged, audited, and attributed to specific individuals.
• Regulatory Compliance & Audit Serve as the Key Point of Contact (POC) for Singapore authorities (CSA, PDPC) and external auditors regarding data security matters. Ensure the organization's compliance with EO 14117 (US Data Security) requirements, specifically regarding data residency and physical separation of duties. Conduct monthly reviews of cloud audit logs (e.g., CloudTrail) to detect and block any non-compliant remote access attempts.
• Incident Response & Operations Lead t...