Cybersecurity Assurance & Resilience Manager

SMRT Corporation Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SMRT Corporation Ltd is seeking a Manager, Cybersecurity Assurance & Resilience to support governance, risk and compliance with a focus on assurance, resilience and third-party risk management.

You will oversee cybersecurity assurance activities, conduct gap analyses, coordinate audits, and work with internal teams to strengthen cyber resilience through tabletop exercises and incident response simulations.

Qualifications

• Experience in cybersecurity assurance and governance.
• Knowledge of regulatory requirements and industry frameworks.

Responsibilities

• Plan, manage and execute cybersecurity assurance activities across systems and processes.
• Conduct reviews against policies, standards, and regulatory requirements to identify gaps.
• Assess implementation and operating effectiveness of controls and propose corrective actions.
• Track remediation and monitor closure of findings and weaknesses.
• Support maturity assessments and benchmarking of cybersecurity capabilities.
• Coordinate evidence collection, validation and reporting for assurance reviews and audits.
• Support cybersecurity compliance activities and monitor posture across units.
• Conduct compliance gap assessments and assist remediation planning.
• Support audits, regulatory inspections and compliance assessments.
• Manage third-party risk management programmes and due diligence for vendors and service providers.
• Monitor vendor cybersecurity posture and ratings to identify risks and remediation needs.
• Prepare assessment reports and recommendations for governance and procurement.

Skills

Cybersecurity

Risk management

Compliance

Vendor risk

Job description

SMRT Corporation Ltd is seeking a Manager, Cybersecurity Assurance & Resilience to support governance, risk and compliance with a focus on assurance, resilience and third-party risk management.

You will oversee cybersecurity assurance activities, conduct gap analyses, coordinate audits, and work with internal teams to strengthen cyber resilience through tabletop exercises and incident response simulations.