Chief IT Risk & Controls Leader

Synapxe; Singapore; On-site; SGD 180,000 - 260,000; Part time

Job summary

Synapxe seeks a senior ICT security lead to translate approved cybersecurity policies into day‑to‑day operational controls across applications, infrastructure, cloud services and third‑party interfaces within a healthcare environment.

The role emphasizes first-line security planning, risk management and control implementation, ensuring security by design and ongoing governance in a large, highly regulated setting.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline.
• At least 10 years of relevant experience in cybersecurity, security engineering, IT operations or technology risk.
• Demonstrated experience implementing and operating security controls, managing vulnerabilities and driving remediation.
• Strong knowledge of cybersecurity frameworks and practices including NIST CSF and ISO/IEC 27001.
• Experience securing enterprise applications, cloud services, interfaces and third‑party services.

Responsibilities

• Formulate and execute the ICT security work plan in line with strategy, policies, standards and risk appetite.
• Maintain first-line accountability for security design, implementation and operation of controls.
• Translate policy requirements into actionable control plans and procedures.
• Secure and deploy resources to achieve security outcomes for the portfolio.
• Report security performance and risks to management and risk function.
• Identify, assess and manage cybersecurity risks from systems, projects and third‑party services.
• Own and maintain first-line risk and control registers for the portfolio.

Skills

Cybersecurity governance

Security risk assessment

Vulnerability management

Incident response

Security controls

Education

Bachelor’s degree in Cybersecurity/IT/CS/Engineering

Tools

NIST Cybersecurity Framework

ISO/IEC 27001

Job description

Synapxe seeks a senior ICT security lead to translate approved cybersecurity policies into day‑to‑day operational controls across applications, infrastructure, cloud services and third‑party interfaces within a healthcare environment.

The role emphasizes first-line security planning, risk management and control implementation, ensuring security by design and ongoing governance in a large, highly regulated setting.