Cybersecurity Assurance & Resilience Lead

SMRT Corporation; Singapore; On-site; SGD 150,000 - 190,000; Full time

Job summary

SMRT Corporation is seeking a Manager, Cybersecurity Assurance & Resilience to join the GRC team in Singapore. You will oversee cybersecurity assurance, resilience, and third‑party risk management, ensuring controls are effective and compliant across systems and business functions.

You will lead evidence collection, audits and incident response tabletop exercises with a proactive, detail‑oriented approach. The role requires 5–10 years in cybersecurity governance, audits, compliance or risk

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related discipline.
• 5–10 years of experience in cybersecurity governance, audit, assurance, compliance, resilience or third‑party risk management.
• Familiarity with frameworks (NIST CSF, ISO/IEC 27001, CIS Controls)
• Experience managing vendor cybersecurity assessments and third‑party risk management programmes.
• Experience designing or facilitating cyber incident response exercises and table‑top exercises.
• Knowledge of regulatory requirements (CCoP, PDPA, sector standards)

Responsibilities

• Plan, manage and execute cybersecurity assurance activities to assess control effectiveness.
• Review against policies, standards, regulatory requirements and frameworks to identify gaps.
• Assess implementation and operating effectiveness of controls and propose corrective actions.
• Track remediation and monitor closure of findings.
• Support maturity assessments and benchmarking of cybersecurity capabilities.
• Coordinate evidence collection, validation and reporting for assurance reviews and audits.
• Support compliance activities to ensure adherence to policies and regulatory requirements.
• Monitor and report cybersecurity compliance posture across units and systems.
• Conduct compliance gap assessments and remediation planning.
• Assist internal and external audits, regulatory inspections and assessments.
• Manage and enhance Third-Party Risk Management programme and assessments.
• Monitor vendor cybersecurity posture and ratings to identify risks and remediation needs.
• Prepare assessment reports, risk findings and recommendations for management decisions.
• Develop and facilitate table-top exercises, cyber crisis simulations and incident response exercises.
• Document exercise outcomes and lessons learned for improvements.
• Support initiatives to strengthen organisational cyber resilience and recovery capabilities.

Skills

Cybersecurity governance

Audit & assurance

Compliance and regulatory

Vendor risk management

Incident response exercises

Metrics and reporting

Education

Bachelor’s degree in Cybersecurity/Info Sec/CS

Job description

SMRT Corporation is seeking a Manager, Cybersecurity Assurance & Resilience to join the GRC team in Singapore. You will oversee cybersecurity assurance, resilience, and third‑party risk management, ensuring controls are effective and compliant across systems and business functions.

You will lead evidence collection, audits and incident response tabletop exercises with a proactive, detail‑oriented approach. The role requires 5–10 years in cybersecurity governance, audits, compliance or risk