Security Manager

The Security Manager is responsible for leading and overseeing cybersecurity governance, risk management, compliance, and operational security functions. This role ensures that systems, applications, cloud environments, and supporting infrastructure are designed, implemented, and operated in accordance with Government security requirements, regulatory obligations, and industry best practices.

The incumbent will serve as a trusted advisor to project stakeholders, auditors, and technology teams, driving a strong security posture through effective governance, risk mitigation, compliance assurance, and continuous security improvement initiatives.

Key Responsibilities

. Implement, maintain, and continuously enhance cybersecurity solutions, policies, standards, procedures, and governance frameworks and agency-specific security requirements.

. Ensure compliance with applicable regulatory, contractual, and security requirements throughout the project lifecycle

. Manage security accreditation activities including VA/PT, Security Assessment Reports and remediation.

. Oversee security monitoring, incident response, vulnerability management and patch governance.

. Ensure security controls are appropriately implemented and maintained throughout the technology stack.

. Act as primary cybersecurity liaison with Government agencies, auditors, vendors and project stakeholders.

. Lead, mentor, and develop cybersecurity personnel, fostering a high-performance security culture.

Qualifications and Experience

. Bachelor Degree in Cybersecurity, Information Security, Computer Science or related discipline

. Minimum 8 -10 years of cybersecurity experience with at least 5- 6 years in a leadership role

. Experience in Singapore public sector projects and Security Requirement

. Demonstrated experience in cybersecurity governance, risk management, compliance, security operations, and security assurance activities

. Good knowledge of ISO standards (ISO 9001, ISO/IEC 27001, ISO/IEC 12207)

. Knowledge of regulatory requirements and industry standards (e.g., NIST, ISO 27001, PCI-DSS, IM8, CSA CCOP)

. Solid understanding of security protocols, cryptography, and security standards

. Familiarity with security tools (e.g., SIEM, PAM, DAM, firewalls, intrusion detection systems) and operating systems (Linux, Windows, etc.)

. Experience in network security, including firewall management, VPNs, and IDS/IPS systems

. Experience with vulnerability scanning, penetration testing, and threat modeling

. Strong communication skills, with the ability to explain technical security concepts to non-technical stakeholders

. Professional certifications such as CISSP, CISM, CEH, CompTIA Security