Manager/Senior Manager, Information Security (InfoSec)

About Us

Rockstead Capital was established in 2005. We believe in building long-term relationships, aligning to our clients interests, and protecting the trust placed in us. Byproviding bespoke asset management and legacy planning services to individuals and families, we protect and grow their wealth. We are a Licensed Fund Management Company (LFMC) under the regime of Monetary Authority of Singapore (MAS).

Job Overview

We are seeking a dynamic and skilled Information Security (InfoSec) Manager/Senior Manager to join our team. You will serve as the organisation's primary owner of information security strategy, infrastructure, and regulatory compliance — with particular emphasis on our IT transformation journey and adherence to the MAS Technology Risk Management (TRM) Guidelines. This is a foundational, high-impact hire with broad mandate and direct leadership visibility.

Key Responsibilities

• Lead the Company's IT governance and security through transformation initiatives, including cloud migration, digital infrastructure, and enterprise systems adoption.
• Serve as the subject matter expert on MAS TRM compliance, conducting gap assessments, risk reviews, and ensuring timely remediation of technology risk findings.
• Establish and enforce IT policies, standards, and procedures across the organisation covering access management, data classification, network security, endpoint protection, and incident response.
• Own the Incident Response and IT Business Continuity Planning (BCP/DRP) frameworks; lead tabletop exercises and coordinate breach response when required.
• Manage IT vendor and third-party risk assessments for any critical IT services as per required by the Company.
• Build internal IT security awareness programmes and drive a culture of IT security across all staff levels.

Key Competencies

• Minimum 8 years of progressive experience in information security, cybersecurity, or technology risk management roles.
• Demonstrated working knowledge of the MAS Technology Risk Management (TRM) Guidelines; prior experience in a regulated financial institution or adjacent sector is strongly preferred.
• Proven track record designing and implementing security frameworks (ISO 27001, NIST CSF, or equivalent) in an enterprise or mid-market context.
• Strong understanding of cloud security architecture (AWS, Azure, or GCP) and hybrid infrastructure environments.
• Excellent stakeholder communication skills — able to translate technical risk into business language for senior management and Board-level audiences.