Assistant Director, Information Security

SPTel Pte Ltd; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

SPTel Pte Ltd in Singapore is seeking a strong security team leader with 8+ years in cybersecurity, GRC, and 3+ years in a leadership role. You will oversee enterprise security governance, compliance, and incident response, guiding a team of cybersecurity professionals across business units to protect assets, networks, and customer services.

Experience in a CII environment is an advantage. Join a dynamic telco security team focused on large-scale network security solutions and strategic risk

Qualifications

• Tertiary qualification in Cybersecurity, Computer Science, IT/Engineering or equivalent.

Responsibilities

• Oversee security governance, risk, and compliance for enterprise IT and networks.

Skills

Team leadership

Cybersecurity strategy

GRC expertise

Incident response

Audits & compliance

Stakeholder engagement

Security architecture

Communication skills

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

NGFW

IPS/IDS

WAF

Anti-DDoS

Active Directory

PAM

MFA

EDR

SIEM

ZTNA

SASE

Job description

SPTel is a Singapore-based enterprise telecommunications provider, now fully owned by Seraya Partners. SPTel delivers software-defined, end-to-end digital connectivity powered by nationwide fibre infrastructure, enabling enterprises to provision and manage network services on demand. Our network is known for reliability and diversity because our unique fibre pathways combine leased SP Group infrastructure with owned fibre pipes laid alongside the power network cables. Our network structure also ensures your data takes the shortest possible route for optimal performance

Job Overview

We are looking for a strong team leader who is passionate about security with at least 8 years of experience in cyber security, GRC and at least 3 years of experience in team lead role.

This role oversees enterprise security governance, compliance, infrastructure protection, incident response, and security support for customer-facing services. The successful candidate will lead a team of cybersecurity professionals and collaborate across business units to ensure the company’s information assets and networks remain protected, compliant, and resilient.

This rewarding role will best suit someone with network experience and the ability to work closely with our engineers to deliver large scale network security solutions.

Experience working with cyber security and in a CII (Critical Information Infrastructure) environment will be an added advantage.

Key Responsibilities

Infrastructure & Network Security

• Oversee the protection of Telco cloud infrastructure and corporate IT network systems. Be responsible for the implementation and management of security-related applications and systems as system owner.
• Lead to architect, implement, manage and continuously improve security-related systems including but not limited to NGFW, IPS, WAF, Anti-DDoS, AD (Active Directory), TACACS+, PAM, MFA, EDR, EPP/SP, SIEM, ZTNA, and SASE.
• Develop Standard Operational Procedures (SOP), Manual of Procedures (MOP), and operational documentation for service delivery and change requests.
• Lead Proof of Concepts (POC) for emerging security technologies and managed security services (MSS).
• Lead the team as Layer 3 technical support for security-related systems issues, SOC alerts, etc.

Governance, Risk & Compliance (GRC)

• Develop cybersecurity strategy to protect and monitor Corporate IT, Telco Infrastructure and Applications.
• Manage the roadmap and execution of security certifications (e.g., ISO27001, MTCS), ensuring alignment with business goals and group policies.
• Lead the establishment, implementation, and continual improvement of the company’s Information Security Management System (ISMS) in alignment with latest ISO/IEC 27001.
• Develop and maintain the information security policy and a supporting set of specific policies, ensuring appropriate authorization, commitment and endorsement from business management.
• Ensure the information security policy is enforced and adhered to.
• Identify and classify information assets and the level of application & data security control and protection required.
• Conduct annual internal audits and prepare for external audits; perform risk assessments, gap analysis, and compliance reviews.
• Lead regular internal and third-party VAPT activities, vulnerability assessment and risk management with system owners, ensure the vulnerabilities
• Design and deliver company-wide cybersecurity awareness programs, including training, phishing simulations, and internal campaigns to foster a culture of security.

Customer Cybersecurity Support

• Evaluate and respond to customer tenders and cybersecurity inquiries, including infrastructure security compliance, managed security services compliance and data privacy compliance.
• Support the Sales and Solution teams in addressing supply chain and third-party cybersecurity requirements.
• Lead the company’s response to cybersecurity incidents and threats.
• Develop and maintain incident response plans, SOC alert playbooks, cyber incident playbooks and conduct annual cyber table-top exercises and/or simulations.
• Provide incident investigation support to SOC and technical operations teams.
• Monitoring and managing all security breaches and handling security incidents, taking remedial action to prevent recurrence wherever possible.
• And other duties as assigned by the HOD.

Requirements

• Tertiary qualification in Cybersecurity, Computer Science, IT / Engineering or equivalent.
• Minimum 10 years of experience in cybersecurity, with at least 5 years in a leadership or strategic role.
• Proven track record in managing ISMS and achieving ISO27001 certification.
• Strong understanding of security architecture across network, infrastructure, and endpoint layers.
• Experience in stakeholder engagement, internal/external audits, and regulatory compliance.
• Familiarity with security operations, risk assessments, incident management, and customer cybersecurity support.
• Professional Certifications such as CISSP, CCSP, CRISC, CISM, ISO 27001 Lead Auditor or equivalent will be an advantage.
• In-depth knowledge of security frameworks (ISO27001, MTCS, NIST).
• Hands-on experience with security technologies (e.g., Firewall, IPS/IDS, WAF, DDoS Protection, AD, PAM, SIEM, EDR, ZTNA).
• Have experience creating design documents (HLD, LLD) diagrams, and presentations
• Strong leadership and team management capabilities.
• Excellent written and verbal communication skills, including report writing and board-level presentations.
• Strategic mindset with strong problem-solving and risk mitigation skills.
• Ability to work cross-functionally with internal teams, auditors, and customers.
• Enjoy working with different stakeholders to achieve desired outcomes.
• Ability to work in a fast-pace environment and multi-tasking.