Cybersecurity Governance Manager / Specialist - IT/OT

Randstad Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Randstad Singapore is seeking a seasoned cybersecurity professional to establish, operationalize, and refresh policies, governance, and data/AI compliance in a dynamic environment. You will oversee risk evaluations across IT and OT, incident handling, and the deployment of security technologies to track KRIs and performance metrics.

The role also focuses on driving security awareness and governance initiatives to foster a resilient security culture across the organization.

Qualifications

• Degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• Minimum 4 years of practical cybersecurity experience spanning both IT and OT.
• Deep knowledge of core security domains (network, application, physical) and risk management principles.
• Familiarity with industry frameworks such as NIST CSF, ISO/IEC 27001, ISA/IEC 62443, or IACS UR E26/E27.
• Possession of or keen interest in professional certifications (e.g., CISSP, CCSP, GSEC, GCIH, AWS, or Azure Security).

Responsibilities

• Establish, operationalize, and regularly update cybersecurity policies, governance structures, and data/AI compliance protocols.
• Conduct risk evaluations, gap analyses, and vulnerability management cycles across combined IT and OT landscapes.
• Direct security incident handling, post-incident root-cause analyses, and organizational readiness simulations.
• Support the deployment and upkeep of security technologies while tracking key risk indicators (KRIs) and performance metrics.
• Champion security awareness initiatives and drive assigned technical governance projects to build a resilient security culture.

Skills

Risk management

IT/OT security

Security frameworks

Certifications interest

Education

Degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field

Job description

Establish, operationalize, and regularly update cybersecurity policies, governance structures, and data/AI compliance protocols.

Conduct risk evaluations, gap analyses, and vulnerability management cycles across combined IT and OT landscapes.

Direct security incident handling, post-incident root-cause analyses, and organizational readiness simulations.

Support the deployment and upkeep of security technologies while tracking key risk indicators (KRIs) and performance metrics.

Champion security awareness initiatives and drive assigned technical governance projects to build a resilient security culture.

Skills and experience required

Degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.

Minimum 4 years of practical cybersecurity experience spanning both IT and OT/industrial control environments.

Deep knowledge of core security domains (network, application, physical) and risk management principles.

Familiarity with industry frameworks such as NIST CSF, ISO/IEC 27001, ISA/IEC 62443, or IACS UR E26/E27.

Possession of or keen interest in professional certifications (e.g., CISSP, CCSP, GSEC, GCIH, AWS, or Azure Security).

About the job

• Establish, operationalize, and regularly update cybersecurity policies, governance structures, and data/AI compliance protocols.
• Conduct risk evaluations, gap analyses, and vulnerability management cycles across combined IT and OT landscapes.
• Direct security incident handling, post-incident root-cause analyses, and organizational readiness simulations.
• Support the deployment and upkeep of security technologies while tracking key risk indicators (KRIs) and performance metrics.
• Champion security awareness initiatives and drive assigned technical governance projects to build a resilient security culture.

Skills and experience required

• Degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• Minimum 4 years of practical cybersecurity experience spanning both IT and OT/industrial control environments.
• Deep knowledge of core security domains (network, application, physical) and risk management principles.
• Familiarity with industry frameworks such as NIST CSF, ISO/IEC 27001, ISA/IEC 62443, or IACS UR E26/E27.
• Possession of or keen interest in professional certifications (e.g., CISSP, CCSP, GSEC, GCIH, AWS, or Azure Security).

Desired Skills and Experience

• Regulatory compliance
• IT governance
• Information Security Governance
• IT Security Policies
• CCSP
• GCIH
• Operational Technology
• OT