Assistant Manager, IT & OT Cyber Security (Based in Jurong Island)

SEMBCORP UTILITIES SERVICES PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Sembcorp Industries in Singapore is seeking an Assistant Manager, IT & OT Cyber Security to support the Group's cybersecurity programme across IT and OT environments, including corporate systems, infrastructure, cloud services and industrial control systems. You will work with Asset Operations, Engineering, Digital and Cybersecurity teams to assess risks and strengthen controls.

This role focuses on governance, risk and assurance, with hands-on support for audits, compliance and security

Responsibilities

• Support the implementation of Group IT and OT cybersecurity policies, standards, and procedures across operational assets.
• Assist in monitoring compliance with IT & OT cybersecurity requirements and industry standards such as IEC 62443, NIST SP 800-82, and ISO 27001.
• Maintain IT & OT cybersecurity documentation, standards, risk registers, and governance materials.
• Support audits, assessments, and regulatory reviews covering IT & OT cybersecurity.
• Conduct or coordinate cybersecurity risk assessments, control reviews, vulnerability reviews, and security assessments covering IT systems, applications, infrastructure, cloud services, OT systems, and digitalization initiatives.
• Track remediation actions, risk-treatment plans, exceptions, and compensating controls, and work with system owners, asset teams, Digital teams, and vendors to address identified gaps.
• Maintain IT and OT asset information, cybersecurity risk registers, critical-system registers, control records, and approved exceptions.
• Support security assessments for new projects, major system changes, remote-access solutions, network connectivity, cloud services, and technology deployments
• Partner with asset operations and engineering teams to implement cybersecurity controls and best practices.
• Participate in security reviews of IT and OT network architectures, system upgrades, application changes, cloud deployments and infrastructure changes.
• Support periodic cybersecurity maturity assessments and compliance reviews across operating sites.
• Assist in establishing cybersecurity requirements for new projects and technology deployments through Security by design reviews
• Support IT & OT cybersecurity incident investigations and coordination activities.
• Participate in cybersecurity tabletop exercises, drills, and resilience testing.
• Assist in monitoring IT & OT security alerts, vulnerabilities, and emerging cyber threats affecting industrial environments.
• Work with cybersecurity operations teams to support threat detection and response activities affecting IT & OT systems.
• Support cybersecurity assessments of IT & OT vendors, system integrators, and contractors.
• Review third-party remote access arrangements to operational systems.
• Assist in ensuring vendors comply with Group cybersecurity requirements during project execution and maintenance activities.
• Support cybersecurity awareness and training programmes for engineering and operations personnel.
• Promote cybersecurity best practices across gas and renewable asset teams.

Job description

About Sembcorp

Sembcorp is a leading energy and urban solutions provider headquartered in Singapore. Led by its purpose to drive energy transition, Sembcorp delivers sustainable energy solutions and urban developments by leveraging its sector expertise and global track record.

Join us in shaping a sustainable energy future

Drive Asia's energy transition with us! Our Gas & Related Services segment is a key growth engine, delivering reliable and efficient energy to industries and communities across multiple countries. We support Asia's growing energy needs while advancing the shift to a lower-carbon future.

Purpose and Scope

Sembcorp Industries is a leading energy and urban development player, driven by its purpose to do good and play its part in creating a sustainable future. As a leading pan-Asian renewable energy player committed to climate action, Sembcorp is nurturing a new corporate venture in carbon management. Combining Sembcorp's technical and operational strength as a renewable energy and sustainable solutions provider and the agility of a startup, Sembcorp aims to connect an ecosystem of partners and leverage on digital technology to support organizations in carbon management and in their climate action journey.

The Assistant Manager, IT & OT Cyber Security supports the implementation and continuous improvement of the Group's cybersecurity programme across Information Technology (IT) and Operational Technology (OT) environments. The scope includes corporate and business systems, infrastructure, cloud services, industrial control systems, and gas and renewable energy assets. This role works closely with Asset Operations, Engineering, Digital, Application, Infrastructure, and Cybersecurity teams to assess cyber risks, implement and strengthen security controls, monitor compliance, and enhance cyber resilience across IT and OT environments. The incumbent will provide hands-on governance, risk, and assurance support while recognizing the distinct operational, safety, availability, and change-management requirements of each environment. The role contributes to protecting critical systems and supporting the safe, reliable, and efficient operation of the Group's energy assets.

Responsibilities

IT & OT Cyber Security Governance & Compliance

• Support the implementation of Group IT and OT cybersecurity policies, standards, and procedures across operational assets.
• Assist in monitoring compliance with IT & OT cybersecurity requirements and industry standards such as IEC 62443, NIST SP 800-82, and ISO 27001.
• Maintain IT & OT cybersecurity documentation, standards, risk registers, and governance materials.
• Support audits, assessments, and regulatory reviews covering IT & OT cybersecurity.

Cyber Risk Management

• Conduct or coordinate cybersecurity risk assessments, control reviews, vulnerability reviews, and security assessments covering IT systems, applications, infrastructure, cloud services, OT systems, and digitalization initiatives.
• Track remediation actions, risk-treatment plans, exceptions, and compensating controls, and work with system owners, asset teams, Digital teams, and vendors to address identified gaps.
• Maintain IT and OT asset information, cybersecurity risk registers, critical-system registers, control records, and approved exceptions.
• Support security assessments for new projects, major system changes, remote-access solutions, network connectivity, cloud services, and technology deployments

Security Assurance & Asset Support

• Partner with asset operations and engineering teams to implement cybersecurity controls and best practices.
• Participate in security reviews of IT and OT network architectures, system upgrades, application changes, cloud deployments and infrastructure changes.
• Support periodic cybersecurity maturity assessments and compliance reviews across operating sites.
• Assist in establishing cybersecurity requirements for new projects and technology deployments through Security by design reviews

Incident Response & Monitoring

• Support IT & OT cybersecurity incident investigations and coordination activities.
• Participate in cybersecurity tabletop exercises, drills, and resilience testing.
• Assist in monitoring IT & OT security alerts, vulnerabilities, and emerging cyber threats affecting industrial environments.
• Work with cybersecurity operations teams to support threat detection and response activities affecting IT & OT systems.

Vendor & Third-Party Security

• Support cybersecurity assessments of IT & OT vendors, system integrators, and contractors.
• Review third-party remote access arrangements to operational systems.
• Assist in ensuring vendors comply with Group cybersecurity requirements during project execution and maintenance activities.

Awareness & Capability Development

• Support cybersecurity awareness and training programmes for engineering and operations personnel.
• Promote cybersecurity best practices across gas and renewable asset teams.

Stay