Manager, Compliance

In today's rapidly evolving threat landscape, cybersecurity governance is essential to maintaining operational integrity and regulatory compliance. SMRT is seeking a detail-oriented and proactive Manager, Compliance to join our Governance, Risk and Compliance (GRC) team. This role is responsible for ensuring that cybersecurity policies, standards and controls are effectively implemented to manage cybersecurity risks across the organisation. 

As Manager, Compliance, you will support Head, Governance, Risk & Compliance in managing, developing and implementing a robust cybersecurity governance, risk and compliance framework and strengthening organisational resilience. Your responsibilities include:

Cybersecurity Compliance

• Manage, plan and execute cybersecurity compliance activities to assess control effectiveness, identify compliance gaps and recommend remediation actions
• Monitor, assess and report cybersecurity maturity levels, ensuring progressive alignment with industry standards and regulatory expectations
• Manage and coordinate internal cybersecurity compliance activities, ensuring consistent application of cybersecurity requirements across business units and systems
• Investigate identified cybersecurity code of conduct violations or control weaknesses, and work with stakeholders to determine root causes and corrective measures.

Cybersecurity Awareness & Training

• Drive the design and delivery of cybersecurity awareness initiatives and training programmes to strengthen organisational cyber resilience.
• Promote a culture of accountability, risk ownership and cybersecurity-first thinking throughout the organisation.

Stakeholder Engagement & Reporting

• Work closely with stakeholders, business units and senior management to communicate group cybersecurity posture and risk exposure.
• Prepare dashboards, metrics and reports to support governance forums and decision-making.

•    A bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related discipline.
•    5–10 years of experience in cybersecurity governance, audit, risk management or compliance.
•    Familiarity with cybersecurity frameworks such as NIST CSF, ISO/IEC 27001, and CIS Controls will be advantageous.
•    Experience conducting risk assessments will be advantageous.
•    Knowledge of regulatory requirements including the Cybersecurity Code of Practice (CCoP), Personal Data Protection Act (PDPA), and sector-specific standards will be advantageous.

Technical Skills include:
•    Understanding of cybersecurity governance, risk and compliance principles.
•    Ability to assess control effectiveness and identify gaps in policy implementation.
•    Skilled in evidence gathering and report writing.
•    Familiarity with GRC platforms and tools for tracking compliance and risk metrics.

Core Competencies include:
•    Excellent analytical and documentation skills, with strong attention to detail.
•    Effective communicator with the ability to engage stakeholders across technical and non-technical domains.
•    High integrity and discretion in handling sensitive information.
•    Proactive and collaborative mindset, with a commitment to continuous improvement