Cybersecurity Assurance & Resilience Manager

SMRT Trains Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SMRT Trains Ltd seeks a proactive Manager, Cybersecurity Assurance & Resilience to join the GRC team. You will oversee assurance, compliance, and third-party risk programmes, ensuring effective cybersecurity controls across systems and processes.

You will coordinate audits, validate evidence, and lead table-top exercises, reporting findings and driving improvements while collaborating with stakeholders across technical and non-technical domains.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related discipline.
• 5-10 years of experience in cybersecurity governance, audit, assurance, compliance, resilience or third-party risk management.
• Familiarity with NIST CSF, ISO/IEC 27001, CIS Controls advantageous.
• Experience managing vendor cybersecurity assessments and third-party risk management programmes advantageous.
• Experience designing or facilitating cyber incident response exercises and tabletop exercises advantageous.

Responsibilities

• Plan, manage and execute cybersecurity assurance activities to assess control effectiveness.
• Review policies, standards and regulatory requirements to identify gaps and improvements.
• Assess control implementation and remediation actions; track findings.
• Coordinate evidence collection, validation and reporting for assurance reviews and audits.
• Support cybersecurity compliance activities and regulatory inspections.
• Manage third-party risk management and vendor cybersecurity assessments.
• Develop and facilitate cyber crisis simulations and incident response exercises.

Skills

Cybersecurity governance

Evidence gathering

Report writing

Stakeholder engagement

Analytical skills

Education

Bachelor's degree in Cybersecurity/IS/CS

Job description

SMRT Trains Ltd seeks a proactive Manager, Cybersecurity Assurance & Resilience to join the GRC team. You will oversee assurance, compliance, and third-party risk programmes, ensuring effective cybersecurity controls across systems and processes.

You will coordinate audits, validate evidence, and lead table-top exercises, reporting findings and driving improvements while collaborating with stakeholders across technical and non-technical domains.