Cybersecurity Engineering Manager

NETS; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

NETS is seeking a Lead - Security Engineering to design, implement, and manage critical information security solutions. You will collaborate with the Head of Security Engineering, Security Operations, Technology, GRC, TPRM and Legal to drive security controls across the enterprise.

You will architect and govern IS tools, lead a high-performance team, and oversee privileged access management, vulnerability management, audit coordination, and risk remediation in a regulated banking environment.

Qualifications

• Minimum 15 years of security experience in complex enterprise environments.
• Extensive hands-on experience with security technologies including PAM, SIEM, SOAR, EDR/XDR, NDR, IPS/IDS, DLP, WAF, and Vulnerability Management tools.
• Proven experience implementing ISMS (ISO 27001) and SOC 2 Type II.
• Strong understanding of security frameworks, risk management, and regulatory compliance in banking or highly regulated environments.
• Demonstrated ability to engage and influence senior stakeholders with excellent communication and documentation skills.
• Strong leadership and people management capabilities with a track record of building high-performing teams.
• Experience in security operations, incident response, risk remediation, and continuous service improvement.
• Familiarity with automation and AI-driven security capabilities to enhance efficiency.
• Experience in vendor and third-party management including security tools and contracts.
• Relevant certifications such as CISSP, CISM, CISA, CRISC or equivalent.

Responsibilities

• Architect, design, and implement IS tools in alignment with NETS security requirements and standards.
• Drive solution approvals by presenting architectures at governance forums and securing endorsement.
• Manage and maintain IS platforms for optimal performance and control execution.
• Deliver end-to-end platform management services in accordance with SLAs.
• Support privileged access management, vulnerability management, audit coordination, and compliance initiatives.
• Monitor operational performance to ensure services meet high-quality standards and SLA commitments.
• Provide security oversight in decision-making forums to ensure policy and regulatory compliance.
• Lead, mentor, and develop the Security Engineering team.
• Manage relationships with security vendors and partners for optimal tool utilization and contracts.
• Support budget planning and cost optimization for security platforms; assist during major security incidents; contribute to strategy and roadmap.

Skills

Leadership

Stakeholder engagement

Communication

Automation & AI

Mentoring

Tools

PAM

SIEM

SOAR

EDR/XDR

NDR

IPS/IDS

DLP

WAF

Vulnerability Management

Job description

The Lead - Security Engineering, plays a critical role in designing, implementing, and managing critical information security solutions that safeguard systems and data.

The ideal candidate will work closely with Head of Security Engineering, Security Operations, Technology, Governance, Risk & Compliance, TPRM and Legal.

Key Responsibilities

• Architect, design, and implement Information Security (IS) tools in alignment with NETS security requirements, regulatory obligations, and industry standards (including but not limited to NIST and ISO 27001).
• Drive solution approvals by presenting architectures and designs at governance and approval forums, collaborating with key stakeholders to secure endorsement.
• Manage and maintain IS platforms to ensure optimal performance, effective configuration for control execution, and full utilization of capabilities and features.
• Deliver end-to-end platform management services, including configuration, change, incident, and problem management in accordance with defined SLAs.
• Support operational excellence by enabling and overseeing critical activities such as privileged access management, vulnerability management, KRI reporting, audit coordination, compliance initiatives, and service request fulfilment.
• Monitor and track operational performance to ensure services delivered by the Security Engineering function consistently meet high-quality standards and SLA commitments.
• Ensure effective implementation and continuous monitoring of IS tools, proactively identifying risks and driving remediation in alignment with enterprise risk management frameworks.
• Establish and deliver security engineering metrics and dashboards, providing clear visibility into control effectiveness, platform health, and overall risk posture to senior management.
• Drive continuous improvement initiatives by embedding automation and AI-driven capabilities to enhance efficiency, scalability, and operational maturity.
• Provide security oversight in decision-making forums, reviewing architectures and solutions to ensure compliance with NETS security policies, regulatory requirements, and industry best practices.
• Lead, mentor, and develop the Security Engineering team, fostering a high-performance culture and strengthening capabilities aligned with evolving security and business needs.
• Manage relationships with security vendors and partners, ensuring optimal tool utilization, service quality, and alignment with contractual and security requirements.
• Support budget planning and cost optimization initiatives for security platforms, ensuring efficient and effective resource utilization.
• Provide leadership support during major security incidents, ensuring timely response, resolution, and implementation of post-incident improvements.
• Contribute to the definition and execution of the Security Engineering strategy and roadmap, aligned with organizational objectives and regulatory expectations.
• Develop and maintain security engineering standards, procedures, and documentation, ensuring consistency, clarity, and compliance.

Requirements

• Minimum 15 years of experience in security, covering domains such as cybersecurity, network security, information security, and data security within complex enterprise environments.
• Extensive hands-on experience with security technologies, including but not limited to PAM SIEM, SOAR, EDR/XDR, NDR, IPS/IDS, DLP, WAF, and Vulnerability Management tools.
• Proven experience in implementing and managing information security programs, including frameworks such as ISMS (ISO 27001) and compliance standards such as SOC 2 Type II.
• Strong understanding of security frameworks, risk management, and regulatory compliance, particularly within a banking or highly regulated environment.
• Demonstrated ability to engage and influence senior stakeholders, supported by excellent communication, presentation, and documentation skills.
• Strong leadership and people management capabilities, with a track record of driving high-performing teams, ensuring operational excellence, and delivering services aligned with SLAs.
• Experience in managing security operations and engineering functions, including incident response support, risk remediation, and continuous service improvement.
• Familiarity with automation and AI-driven security capabilities to enhance operational efficiency and maturity.
• Experience in vendor and third-party management, including oversight of security tools, service providers, and associated contractual obligations.
• Relevant technical, managerial, and industry-recognized certifications, such as CISSP, CISM, CISA, CRISC, or equivalent.