Key Responsibilities
Application Development & Automation
Design, develop, deploy and maintain secure, scalable and high-performing full stack applications and automation solutions to support systematic second-line monitoring and assessment of First Line of Defence risk controls; translate IM8, cybersecurity, governance and internal control requirements into configurable rules, workflows and automated checks to identify compliance gaps, support timely escalation and facilitate remediation tracking, while retaining appropriate human review for exceptions and assurance conclusions; take ownership of end-to-end application development, integrating responsive and accessible user interfaces, backend services, databases, cloud infrastructure and workflow functions for compliance assessment, evidence review and exception management.
Reporting & Compliance Visibility
Develop dashboards and management reports that provide clear visibility of compliance status, identified gaps, remediation progress, risk trends and supporting evidence.
Secure Engineering & DevSecOps
Establish secure software engineering practices across all systems, including authentication, authorisation, API and frontend security, encryption, secrets management, audit logging, code review, automated testing, vulnerability management and secure deployment.
Artificial Intelligence Enablement
Explore and implement Artificial Intelligence-assisted capabilities, where appropriate, to analyse documents and evidence, identify potential control gaps and improve the efficiency and consistency of second-line checks, with appropriate human oversight.
Stakeholder Engagement & Continuous Improvement
Work closely with governance, cybersecurity, system owners and other stakeholders to gather requirements, validate automated checks and continuously improve solution accuracy, scalability and usability.
Requirements
Education
Degree or tertiary qualification in Computer Science, Software Engineering, Information Systems, Electronics Engineering, Information Technology or an equivalent discipline.
Experience
At least 5 years
of relevant experience in software engineering, full stack application development or automation, with participation in at least three Agile or full project development life cycles and experience supporting production-grade solutions.
Software Development Technologies
Strong proficiency in frontend and backend development using relevant technologies such as JavaScript or TypeScript, React.js, Next.js or Vue.js, together with Node.js, Python, Java or .NET.
Database, API & Integration Technologies
Hands-on experience in database design, SQL or PostgreSQL, data processing and transformation, API development and system integration using technologies such as REST, GraphQL, gRPC or WebSockets.
Cloud Technologies
Experience in cloud solutioning and deployment, preferably on AWS, Azure or Google Cloud; familiarity with Government Commercial Cloud will be an advantage.
DevSecOps & Platform Engineering
Experience with DevSecOps practices, CI/CD pipelines, source-code management, containerisation and orchestration, and Infrastructure as Code tools such as GitHub Actions, GitLab CI, Jenkins, Docker, Kubernetes, Terraform or CloudFormation.
Secure Software Development
Good knowledge of secure software development practices, including authentication, authorisation, JWT, API security, IAM, secrets management, CSP, CORS, XSS prevention and OWASP Top 10.
Testing & Quality Engineering
Experience with automated unit, integration, frontend, backend and contract testing using appropriate tools and frameworks.
Governance, Risk & Compliance Knowledge
Knowledge of IT compliance, cybersecurity, governance, risk management or audit processes, with the ability to translate control requirements into automated validation rules; knowledge and experience of IM8, NIST, ISO 27001/2 or other relevant ICT security policies and standards will be an advantage.
Artificial Intelligence & Advanced Technologies
Experience with Artificial Intelligence or Large Language Model tools, document analysis, Retrieval-Augmented Generation, workflow systems, dashboards or data visualisation will be an advantage; experience with web scraping, batch processing, serverless services, low-code applications or troubleshooting application, infrastructure and security issues will be an advantage.
Professional Skills
Strong analytical, problem-solving and troubleshooting skills, with attention to data quality, control accuracy and maintainable solution design; strong interpersonal and stakeholder management skills, with the ability to work independently and effectively in cross-functional, multi-disciplinary teams and communicate technical concepts clearly.
Company Overview – CMC APAC
CMC APAC Pte. Ltd.
, a member of
CMC Global
under
CMC Corporation,
is a Singapore-based regional hub delivering ICT and digital transformation solutions across the Asia-Pacific region.
As the Asia-Pacific arm of CMC Global, CMC APAC extends the Group’s technological expertise into one of the world’s most dynamic digital markets. Building on a strong foundation as a leading digital transformation (DX) provider in Vietnam, we serve as a strategic hub for delivering AI, Data, Cloud, and next-generation technology solutions across the region.
About CMC Global
CMC Global is a leading technology and AI transformation services provider, serving over 300 global clients across industries such as:
Banking & Financial Services
Healthcare
Manufacturing
Automotive
The company delivers end-to-end solutions in AI, Data, Cloud, and Digital Transformation, supporting enterprises in solving complex business challenges at scale.
Founded in 2017, CMC Global builds upon the long-standing legacy of CMC Corporation (established in 1993), one of Vietnam’s leading technology groups, with a vision to bring Vietnamese ICT solutions to the global market.
Global Presence & Capabilities
With an international network spanning Asia-Pacific, Europe, and North America, CMC Global provides:
24/7 global delivery capability
Strong engineering talent pool
Scalable and cost-effective delivery models
At CMC APAC, we combine global delivery excellence with local market expertise to support enterprises in achieving:
Operational efficiency
Business growth
Sustainable, long-term value
Learn More
CMC APAC: https://cmc-apac.sg/
CMC Global: *************