Cybersecurity & GRC Manager (Digital & Tech)

CLI Asset Management; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible medical coverage

Training & development

Ascott residence discounts

Volunteer programs

Wellness programmes

Job summary

CapitaLand Investment Limited (CLI) invites a skilled Manager, IT Security to drive cybersecurity governance, risk management, compliance, policy management and OT security across the Group. You will partner with business units, technology teams and external stakeholders to strengthen security controls and regulatory adherence.

You will lead GRC activities, develop and maintain security policies, conduct risk assessments and audits, oversee third‑party risk, and collaborate with regional teams

Qualifications

• Degree in Information Security, CS, IT or related discipline.
• 5–8 years in cybersecurity, GRC, or tech risk management.
• Strong knowledge of NIST CSF, ISO 27001, CIS Controls, PCI DSS and PDPA.
• Experience in governance, risk assessments, audits, policy development.
• Familiar with OT/IoT security and smart building tech is a plus.
• Professional certifications preferred: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer/Auditor.

Responsibilities

• Lead cybersecurity governance, risk and compliance (GRC) activities across the organization.
• Develop, maintain and enhance cybersecurity policies, standards, procedures and guidelines aligned with business and regulatory requirements.
• Lead security architecture reviews for infrastructure, cloud, network, endpoint, application, data and digital transformation initiatives.
• Drive compliance with PDPA, PCI DSS, ISO 27001, NIST CSF and other requirements.
• Manage cybersecurity risk assessments and maintain the enterprise cyber risk register, including tracking of risk mitigation plans.
• Coordinate internal and external audits, assessments and compliance reviews, and drive remediation of identified findings.
• Oversee third‑party cybersecurity risk assessments and work with vendors to address identified security gaps.
• Establish OT and IoT cybersecurity governance frameworks for smart building and OT environments.
• Conduct OT cybersecurity risk assessments and work with stakeholders to improve controls for OT systems.
• Partner with enterprise architecture, infrastructure and application teams to integrate cybersecurity requirements into initiatives.
• Manage and coordinate cybersecurity projects and initiatives as assigned.
• Collaborate with regional teams to drive consistent governance practices.

Skills

Governance & risk management

Cybersecurity frameworks

Stakeholder management

Policy development

Audits & risk assessments

Education

CISSP

CISM

CRISC

CISA

ISO 27001 Lead Implementer

Job description

CapitaLand Investment Limited (CLI) invites a skilled Manager, IT Security to drive cybersecurity governance, risk management, compliance, policy management and OT security across the Group. You will partner with business units, technology teams and external stakeholders to strengthen security controls and regulatory adherence.

You will lead GRC activities, develop and maintain security policies, conduct risk assessments and audits, oversee third‑party risk, and collaborate with regional teams