Assistant Director, Information Security

THIRD PARTY CONSULTING PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

THIRD PARTY CONSULTING PTE. LTD. seeks an Assistant Director of Information Security to shape and lead the organisation's cybersecurity strategy and governance across corporate IT, cloud platforms and customer services.

You will oversee security architecture, risk management, regulatory compliance and incident response while driving the adoption of industry best practices and security technologies. You will provide senior technical leadership, align security with business objectives, and

Qualifications

• Experience leading enterprise cybersecurity strategy and governance programs.
• Knowledge of ISO/IEC 27001 and MTCS is a plus.
• Ability to drive risk remediation and regulatory compliance across complex environments.

Responsibilities

• Oversee security architecture for telecom and IT environments, ensure lifecycle Mgmt.
• Lead ISMS implementation and vendor security assessments.
• Coordinate incident response planning and cyber resilience initiatives.
• Support customer security inquiries and third‑party risk assessments.

Skills

Cybersecurity leadership

Security architecture

Governance & risk

Tools

NGFW

SIEM

EDR

Job description

Job Overview

The Assistant Director, Information Security is responsible for developing, leading and continuously enhancing the organisation's cybersecurity strategy, governance framework and security operations across corporate IT, telecommunications infrastructure, cloud platforms and customer-facing services.

The role combines strategic leadership with hands‑on technical oversight across security architecture, information security governance, risk management, regulatory compliance, incident response and cyber resilience. As the organisation's cybersecurity subject matter expert, the incumbent will safeguard critical business and network assets, drive security certifications and compliance initiatives, support customer cybersecurity requirements, and champion the adoption of security technologies and industry best practices to address evolving cyber threats.

Key Responsibilities

1. 1. Infrastructure and Network SecurityOversee the security of telecommunications cloud infrastructure, corporate IT networks and related systems.Lead the architecture, implementation, management and continuous improvement of security technologies, including Next-Generation Firewalls (NGFW), Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF), Anti-DDoS solutions, Active Directory (AD), TACACS+, Privileged Access Management (PAM), Multi-Factor Authentication (MFA), Endpoint Detection and Response (EDR), Endpoint Protection Platforms (EPP), Security Information and Event Management (SIEM), Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE).Take ownership of security-related applications and systems, ensuring effective implementation, maintenance, operational performance and lifecycle management.Develop and maintain Standard Operating Procedures (SOPs), Method of Procedures (MOPs) and technical documentation for service delivery, system administration and change management.Lead proof-of-concept (POC) initiatives to evaluate emerging security technologies and managed security services (MSS).Provide Level 3 technical leadership and escalation support for security-related system issues, security operations centre (SOC) alerts and complex infrastructure security incidents.
2. 2. Information Security Governance, Risk and ComplianceDevelop and execute the organisation's cybersecurity strategy and roadmap to protect corporate IT, telecommunications infrastructure, applications and information assets.Lead the implementation, maintenance and continual improvement of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001 and relevant industry standards.Drive security certification initiatives, including ISO 27001 and Multi-Tier Cloud Security (MTCS), where applicable, ensuring alignment with business objectives and organisational policies.Establish, review and maintain information security policies, standards and procedures, obtaining the necessary management approval and commitment.Promote compliance with information security policies and ensure that appropriate controls are implemented and consistently followed across the organisation.Identify and classify information assets, assess associated risks, and define appropriate application and data security controls.Lead risk assessments, gap analyses, compliance reviews and internal audits, and coordinate external audits and certification assessments.Oversee regular internal and third‑party vulnerability assessments and penetration testing (VAPT), ensuring that identified vulnerabilities are assessed, prioritised, tracked and remediated in collaboration with system owners.Establish and monitor cybersecurity risk management processes, ensuring that security risks are appropriately documented, reported and addressed.Develop and deliver organisation‑wide cybersecurity awareness initiatives, including training, phishing simulations and internal campaigns, to strengthen security awareness and promote a culture of cybersecurity.
3. 3. Customer Cybersecurity SupportEvaluate and respond to customer tenders, security questionnaires and cybersecurity enquiries relating to infrastructure security, managed security services, regulatory compliance and data privacy.Work closely with Sales and Solution teams to address customer security requirements, third‑party risk assessments and supply chain cybersecurity obligations.Provide technical and governance input for customer security assessments, due diligence exercises and compliance submissions.Support customer engagements by articulating the organisation's security architecture, controls, certifications and risk management practices.
4. 4. Cybersecurity Incident Response and ResilienceLead the organisation's response to cybersecurity incidents, threats and security breaches, coordinating with relevant technical and business stakeholders.Develop, maintain and periodically review incident response plans, SOC alert playbooks and cyber inc