Cyber Security Lead

SAFRA National Service Association; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SAFRA National Service Association seeks a Cyber Security Lead to strengthen the organisation’s security posture across endpoints, servers, networks, cloud services and business applications. You will coordinate day‑to‑day with the MSSP, investigate security events, drive remediation and system hardening, and support governance, risk management, audits and cyber resilience across multiple sites.

The role requires strong technical judgement, disciplined follow‑through and the ability to translate

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Information Systems or related field.
• Minimum 6 years of relevant cybersecurity or infrastructure security experience with operational ownership.
• Hands‑on experience in security monitoring, incident investigation, vulnerability management, patching and secure configuration.
• Experience with MSSP, managed service providers or third‑party security vendors in an enterprise environment.
• Experience driving audits, risk assessments, risk management, VAPT remediation and security compliance initiatives.
• Experience with policy development and regulatory compliance (ISO/IEC 27001, NIST CSF, CIS Controls, GDPR, PDPA Singapore).

Responsibilities

• Security Operations & Incident Response across endpoints, servers, networks, cloud and M365 with MSSP coordination.
• Investigate security events, coordinate containment, eradication, recovery and post‑incident follow‑up.
• Maintain incident response playbooks, escalation procedures and crisis management participation.
• Lead vulnerability lifecycle management and secure configuration/hardening using benchmarks.
• Coordinate remediation with infrastructure, applications, cloud and vendors; validate fixes via rescans.
• Manage MSSP performance, SLAs/KPIs and third‑party security assessments; support audits and risk management.

Skills

Security monitoring

Incident investigation

Vulnerability management

Patch management

Policy development

Security governance & compliance

Stakeholder communication

Education

Bachelor’s degree in Cybersecurity/IT/CS/IS

Tools

SIEM

Vulnerability management tools

Endpoint protection

Job description

The Cyber Security Lead is a hands‑on operational role responsible for strengthening the organization's security posture across endpoints, servers, networks, cloud services and business applications. The role leads day‑to‑day coordination with the Managed Security Service Provider (MSSP), investigates security events, drives vulnerability remediation and system hardening. Lead and manage security tools. Drive and supports governance, risk management, audit, awareness and cyber resilience activities across multiple sites.

Success in this role requires strong technical judgement, disciplined follow-through and the ability to translate security findings into clear, practical actions for IT teams, system owners, vendors and management.

Key Responsibilities:

Security Operations & Incident Response (20%)

• Monitor security alerts, incidents and service health across endpoint, network, cloud and Microsoft 365 environments, working closely with the MSSP and internal IT teams.

• Triage and investigate security events; coordinate containment, eradication, recovery and post‑incident follow‑up within agreed service levels.

• Ensure incidents are documented, appropriately escalated and tracked to closure, with clear evidence, root‑cause findings and lessons learned.

• Maintain incident response playbooks, escalation procedures and operational contact lists; participate in crisis management and cyber incident exercises.

Vulnerability Management & Security Hardening (30%)

• Manage the vulnerability lifecycle from identification and validation through risk prioritization, remediation, exception handling and closure.

• Coordinate remediation with infrastructure, application, cloud and vendor teams; validate that fixes are effective through rescanning or other evidence.

• Lead secure‑configuration and hardening activities using recognised benchmarks such as CIS Benchmarks and relevant vendor security baselines.

• Monitor device compliance, patch status, configuration drift and endpoint security findings across corporate workstations and servers.

• Produce vulnerability trend reports and highlight overdue, recurring or high‑risk exposures to management.

MSSP, Vendor & Third‑Party Security Management (15%)

• Serve as the operational lead for MSSP activities across all sites, reviewing alerts, reports, dashboards, cases and recommended actions.

• Monitor MSSP performance against agreed SLAs and KPIs, challenge incomplete findings and coordinate service‑improvement actions.

• Conduct or support security assessments of vendors, solutions and services, including cloud, hosted, managed and on‑premises arrangements.

• Coordinate VAPT, security testing and remediation activities with external providers and internal stakeholders.

Risk, Compliance & Assurance (15%)

• Conduct security risk assessments and support internal audits, external audits, compliance reviews and certification activities.

• Maintain security evidence, risk records, remediation trackers, standards, procedures and supporting documentation.

• Support compliance with organisational requirements and applicable frameworks, including CSA Cyber Trust Mark requirements where relevant.

• Assist with business continuity, disaster recovery and cyber resilience planning and exercises.

Security Awareness & Stakeholder Engagement (10%)

• Coordinate phishing simulations, security awareness campaigns and remedial training; track participation, completion and improvement metrics.

• Develop practical advisories, bulletins and guidance based on current threats, incidents and policy requirements.

• Provide security advice to project teams, system owners and business stakeholders, translating technical risk into clear business impact and actions.

Security Improvement & Reporting (10%)

• Identify control gaps and recommend proportionate improvements to security tools, processes and operating procedures.

• Maintain operational metrics and provide concise reports on incidents, vulnerabilities, compliance, awareness and remediation performance.

• Support security projects and other duties aligned with the organisation’s cybersecurity priorities.

Qualifications & Experience

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems or a related discipline.

• Minimum 6 years of relevant cybersecurity or infrastructure security experience, with demonstrated ownership of operational security activities.

• Hands‑on experience in security monitoring, incident investigation, vulnerability management, patching and secure configuration.

• Experience working with an MSSP, managed service provider or third‑party security vendors in an enterprise environment.

• Experience driving and supporting audits, risk assessments, risk management, VAPT remediation and security compliance initiatives.

• Experience in policy development lifecycle, Regulatory Compliance alignment and compliance with regional and global standards such as ISO/IEC 27001, NIST CSF, CIS Controls, GDPR, Cyber trust mark and PDPA (Singapore).

• Experience in a multi‑site environment is advantageous.