Cyber Security Manager

Role Summary:

The Cybersecurity Manager will lead the organization's efforts to strengthen its cybersecurity posture and ensure compliance with data protection regulations such as the Personal Data Protection Act (PDPA). This role will oversee the monitoring of security tools, manage incident response, drive cybersecurity awareness, lead audits and certifications (e.g., Cyber Trust Mark), and work collaboratively across teams to secure systems and applications. The manager will also coordinate closely with the Data Protection Officer (DPO) to implement privacy best practices, support audits, and promote data security throughout the organization.

Key Responsibilities:

Security Monitoring & Incident Response

• Monitor TrendMicro and other security tools (server, email, mobile, and endpoint) daily to identify and escalate potential threats.
• Collaborate with IT teams to investigate and resolve critical vulnerabilities or incidents.
• Review the security posture of applications regularly and coordinate patching and remediation efforts with application owners.

Security Assessments & Risk Management

• Plan and manage penetration tests and annual cybersecurity assessments, ensuring timely resolution of findings.
• Evaluate and improve IT security policies; develop and maintain security procedures and documentation.
• Ensure all systems and applications adhere to IT security policies; assist teams in remediating identified gaps.
• Lead and prepare the organization for Cyber Trust Mark Certification or equivalent external audits.

Security Awareness & Training

• Conduct monthly phishing simulations and provide detailed reports with improvement plans.
• Lead quarterly IT security awareness training to promote a cyber-aware culture among employees.
• Produce monthly reports on the organization's cybersecurity posture, completed initiatives, and upcoming focus areas.

Data Protection & Regulatory Compliance.

• Ensure compliance with PDPA and other applicable data protection laws and standards.
• Collaborate with the DPO and Deputy DPOs on privacy-related audits, risk assessments, and policy updates.
• Support the development and enforcement of data protection policies and secure data-handling practices across teams.
• Maintain documentation and assist in responses to regulatory reviews or inquiries.

Security Projects & Strategic Initiatives.

• Lead and manage key security projects, including the implementation of new tools, compliance improvements, and vulnerability management platforms.
• Evaluate third-party and vendor security, ensuring contract terms include necessary controls and audit rights.
• Contribute to the overall security strategy in alignment with business goals and regulatory requirements.

Requirements

1. 5+ years of Cybersecurity/Information Security experience with exposure to security operations, risk management, and compliance.
2. Security Monitoring & Incident Response experience, including threat detection, security tools management (e.g., Trend Micro), incident investigation, and remediation.
3. Vulnerability Management & Security Assessments, including penetration testing, vulnerability scanning, risk assessments, and remediation tracking.
4. Strong knowledge of PDPA and Data Protection, with experience supporting privacy audits, compliance reviews, and data protection initiatives.
5. Cybersecurity Governance experience in developing and enforcing security policies, standards, procedures, and controls.
6. Audit & Certification Management, including preparation for Cyber Trust Mark, ISO 27001, or similar cybersecurity compliance frameworks.
7. Security Awareness & Training skills to conduct phishing simulations, employee awareness programs, and cybersecurity reporting.
8. Leadership & Stakeholder Management capability to lead security projects, manage vendors, collaborate with IT/business teams, and present security risks to management.

Interested candidate who wish to apply for the advertised position, please click Apply. We regret that only shortlisted candidates will be notified

EA License No.: 01C4394 (PERSOL Singapore Pte Ltd)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd (PERSOL) and its local and overseas subsidiaries and affiliates to collect, use and disclose your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services, complying with Government's health advisories and such other purposes stated in our Privacy Policy.

We may use artificial intelligence (AI) and machine learning technologies to support our recruitment and placement services, including screening resumes, assessing qualifications and experience, and identifying skills and job matches. Where permitted by applicable law, we may also use such personal data to develop, train, test, improve and/or fine-tune AI and machine learning technologies that support our recruitment and business operations.

For more information on how we collect, use, disclose and protect your personal data, please refer to our Privacy Policy: https://www.persolsingapore.com/policies. If you wish to withdraw your consent, including consent relating to the use of your personal data for AI-enabled recruitment activities and AI development activities, please email us at [Confidential Information].