Assistant Manager, IT & OT Cyber Security (Based in Jurong Island)

SembCorp Utilities Pte. Ltd.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Sembcorp Industries is seeking an Assistant Manager to lead IT & OT cybersecurity governance and risk management across IT and Operational Technology environments within Singapore. You will drive policy implementation, risk assessments, and security controls for corporate systems, industrial networks, and cloud services.

Join a energy leader focused on resilience, safety, and climate action. The role collaborates with Asset Operations, Engineering, Digital, and vendors to strengthen cyber

Qualifications

• Bachelor's Degree in Cyber Security, IT, CS, EE, Automation or related discipline.
• 4-7 years of experience in cybersecurity, industrial automation, control systems, or related tech roles.
• Exposure to OT, IC, SCADA, DCS or industrial networks preferred.
• Experience in energy, utilities, power generation, oil & gas, manufacturing, or critical infrastructure sectors advantageous.

Responsibilities

• Govern IT & OT cybersecurity governance and compliance across assets.
• Support audits, assessments, and regulatory reviews for IT & OT cybersecurity.
• Monitor compliance with standards such as IEC 62443, NIST SP 800-82, ISO 27001.
• Maintain cybersecurity documentation, risk registers, and governance materials.
• Conduct or coordinate cybersecurity risk assessments, vulnerability reviews, and security assessments for IT/OT systems.
• Track remediation actions and work with owners, asset teams, and vendors to close gaps.
• Assist in security for new projects, remote access, cloud deployments, and infrastructure changes.
• Support security reviews of network architectures and system changes.
• Assist cybersecurity maturity assessments and security-by-design reviews.

Skills

ICS

SCADA

DCS

IEC 62443

NIST

ISO 27001

Vulnerability mgmt

Education

4-7 yrs exp

Job description

About Sembcorp
Sembcorp is a leading energy and urban solutions provider headquartered in Singapore. Led by its purpose to drive energy transition, Sembcorp delivers sustainable energy solutions and urban developments by leveraging its sector expertise and global track record.

Join us in shaping a sustainable energy future

Drive Asia’s energy transition with us! Our Gas & Related Services segment is a key growth engine, delivering reliable and efficient energy to industries and communities across multiple countries. We support Asia’s growing energy needs while advancing the shift to a lower-carbon future.

Purpose and Scope

Sembcorp Industries is a leading energy and urban development player, driven by its purpose to do good and play its part in creating a sustainable future. As a leading pan-Asian renewable energy player committed to climate action, Sembcorp is nurturing a new corporate venture in carbon management. Combining Sembcorp’s technical and operational strength as a renewable energy and sustainable solutions provider and the agility of a startup, Sembcorp aims to connect an ecosystem of partners and leverage on digital technology to support organizations in carbon management and in their climate action journey.

The Assistant Manager, IT & OT Cyber Security supports the implementation and continuous improvement of the Group’s cybersecurity programme across Information Technology (IT) and Operational Technology (OT) environments. The scope includes corporate and business systems, infrastructure, cloud services, industrial control systems, and gas and renewable energy assets.

This role works closely with Asset Operations, Engineering, Digital, Application, Infrastructure, and Cybersecurity teams to assess cyber risks, implement and strengthen security controls, monitor compliance, and enhance cyber resilience across IT and OT environments. The incumbent will provide hands‑on governance, risk, and assurance support while recognizing the distinct operational, safety, availability, and change‑management requirements of each environment. The role contributes to protecting critical systems and supporting the safe, reliable, and efficient operation of the Group’s energy assets.

Responsibilities

• IT & OT Cyber Security Governance & Compliance
• Support the implementation of Group IT and OT cybersecurity policies, standards, and procedures across operational assets.
• Assist in monitoring compliance with IT & OT cybersecurity requirements and industry standards such as IEC 62443, NIST SP 800-82, and ISO 27001.
• Maintain IT & OT cybersecurity documentation, standards, risk registers, and governance materials.
• Support audits, assessments, and regulatory reviews covering IT & OT cybersecurity. Cyber Risk Management
• Conduct or coordinate cybersecurity risk assessments, control reviews, vulnerability reviews, and security assessments covering IT systems, applications, infrastructure, cloud services, OT systems, and digitalization initiatives.
• Track remediation actions, risk‑treatment plans, exceptions, and compensating controls, and work with system owners, asset teams, Digital teams, and vendors to address identified gaps.
• Maintain IT and OT asset information, cybersecurity risk registers, critical‑system registers, control records, and approved exceptions.
• Support security assessments for new projects, major system changes, remote‑access solutions, network connectivity, cloud services, and technology deployments
• Security Assurance & Asset Support
• Partner with asset operations and engineering teams to implement cybersecurity controls and best practices.
• Participate in security reviews of IT and OT network architectures, system upgrades, application changes, cloud deployments and infrastructure changes.
• Support periodic cybersecurity maturity assessments and compliance reviews across operating sites. Assist in establishing cybersecurity requirements for new projects and technology deployments through Security by design reviews
• Incident Response & Monitoring Support IT & OT cybersecurity incident investigations and coordination activities.
• Participate in cybersecurity tabletop exercises, drills, and resilience testing.
• Assist in monitoring IT & OT security alerts, vulnerabilities, and emerging cyber threats affecting industrial environments.
• Work with cybersecurity operations teams to support threat detection and response activities affecting IT & OT systems. Vendor & Third‑Party Security
• Support cybersecurity assessments of IT & OT vendors, system integrators, and contractors.
• Review third‑party remote access arrangements to operational systems.
• Assist in ensuring vendors comply with Group cybersecurity requirements during project execution and maintenance activities.
• Awareness & Capability Development
• Support cybersecurity awareness and training programmes for engineering and operations personnel.
• Promote cybersecurity best practices across gas and renewable asset teams.
• Stay updated on emerging IT & OT cybersecurity threats, technologies, and industry developments.

Qualifications & Experience

• Bachelor's Degree in Cyber Security, Information Technology, Computer Science, Electrical Engineering, Automation, or a related discipline. Experience
• 4-7 years of experience in cybersecurity, industrial automation, control systems, or related technology roles.
• Exposure to OT, IC, SCADA, DCS, or industrial network environments is preferred.
• Experience in energy, utilities, power generation, oil & gas, manufacturing, or critical infrastructure sectors is an advantage.

Technical Knowledge

Basic to intermediate understanding of:

• Industrial Control Systems (ICS)
• CADA and DCS environments
• PLCs, RTUs, and industrial communication protocols
• IT & OT network architecture and segmentation principles
• Vulnerability management and cybersecurity risk assessment
• Secure remote access technologies
• Cybersecurity frameworks and standards (IEC 62443, NIST, ISO 27001)

Our Culture at Sembcorp

At Sembcorp, our culture is shaped by a strong set of shared behaviours that guide the way we work and uphold our commitment to driving the energy transition.

We foster an institution‑first mindset, where the success of Sembcorp takes precedence over individual interests. Collaboration is at the heart of what we do, as we work seamlessly across markets, businesses, and functions to achieve our goals together. Accountability is a core principle, ensuring that we take ownership of our commitments and deliver on them with integrity and excellence. These values define who we are and create a workplace where our people can thrive while making a meaningful impact on driving energy transition.

Join us in making a real impact!