Cybersecurity and Technology Risk Manager

Kerry Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kerry Consulting is partnering with a multinational in Singapore to appoint a Cybersecurity and Technology Risk Manager. The role oversees cybersecurity, technology risk and resilience across enterprise systems, cloud infrastructure, digital platforms and third‑party ecosystems.

The candidate balances strategic risk management with hands‑on security expertise, strengthening the security posture amid ongoing digital transformation.

Qualifications

• 6–10 years of cybersecurity/tech risk experience
• At least 3 years in a security leadership role
• Familiarity with NIST CSF, ISO 27001, PDPA, PCI DSS

Responsibilities

• Develop and implement cybersecurity and technology risk strategies
• Embed security-by-design and Zero Trust across initiatives
• Oversee threat monitoring, vulnerability management and incident response
• Coordinate third‑party security assessments and audits
• Promote security awareness and provide updates to senior management

Skills

Leadership

Security governance

Threat management

Cloud security

Stakeholder communication

Education

Bachelor's degree in Computer Science/Info Security/IT

Job description

We are partnering with an established multinational organisation with a significant presence in Singapore to appoint a Cybersecurity and Technology Risk Manager to oversee cybersecurity, technology risk and resilience across enterprise systems, cloud infrastructure, digital platforms and third-party ecosystems.

This role requires a well-rounded cybersecurity professional who can balance strategic risk management with hands‑on security expertise, strengthening the organisation's security posture while supporting ongoing digital transformation.

Key Responsibilities:

Cybersecurity Strategy & Governance

• Develop and implement cybersecurity and technology risk strategies aligned with business objectives and enterprise standards.
• Establish and enhance security policies, frameworks and controls based on NIST CSF, ISO 27001 and industry best practices.
• Embed security‑by‑design principles across technology initiatives, incorporating Zero Trust and cloud security practices.
• Monitor security effectiveness, identify control gaps and drive continuous improvement.

Cybersecurity Operations & Threat Management

• Oversee security monitoring, threat detection, vulnerability management and incident response capabilities.
• Strengthen security controls across endpoints, networks, cloud, applications, APIs and enterprise platforms.
• Work with internal teams and external providers to identify and remediate vulnerabilities, leveraging automation where appropriate.

Technology Risk, Compliance & Third-Party Security

• Lead technology and cybersecurity risk assessments, identifying material risks and recommending mitigation strategies.
• Ensure compliance with applicable regulations and standards, including PDPA and PCI DSS.
• Coordinate security audits, regulatory assessments and remediation activities.
• Oversee third‑party security assessments, due diligence and ongoing risk monitoring.
• Develop risk metrics and management reporting to support executive decision‑making.

Incident Management & Business Resilience

• Develop and maintain cybersecurity incident response, business continuity and disaster recovery capabilities.
• Coordinate incident response and recovery activities to minimise business disruption.
• Conduct tabletop exercises and crisis simulations to strengthen organisational readiness.

Digital Security & Secure Transformation

• Partner with technology and engineering teams to embed security into cloud, infrastructure and digital transformation initiatives.
• Support secure software development, application security and DevSecOps practices.
• Strengthen security across modern workplace technologies, SaaS platforms and digital applications.

Stakeholder Management & Security Awareness

• Collaborate with regional and global cybersecurity teams to align security practices with enterprise standards.
• Advise business and technology stakeholders on cybersecurity risks and improvement initiatives.
• Promote security awareness and provide regular updates to senior management on security posture, emerging threats and key risks.

Requirements:

• Bachelor's degree in Computer Science, Information Security, Information Technology or a related discipline.
• 6–10 years of relevant experience in cybersecurity, technology risk or information security, including at least 3 years in a security leadership capacity.
• Broad expertise across cybersecurity operations, security governance, technology risk management and regulatory compliance.
• Strong understanding of cloud security, network security, endpoint protection, IAM, vulnerability management and incident response.
• Experience implementing cybersecurity strategies and security improvement initiatives within complex enterprise environments.
• Familiarity with NIST CSF, ISO 27001, PDPA and PCI DSS.
• Experience managing third‑party security risks, audits, business continuity and disaster recovery.
• Strong stakeholder management and communication skills, with the ability to translate technical risks into practical business recommendations.
• Relevant certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 would be advantageous.

We regret that only shortlisted candidates will be notified.