Cybersecurity Manager

The Hour Glass; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

The Hour Glass, a Singapore-based company, seeks a Cybersecurity Manager to lead cybersecurity and data protection initiatives across the Group. You will work with the DTS team, DPO, stakeholders, and partners to strengthen security posture, drive compliance, and foster a culture of cybersecurity awareness.

You will oversee security operations, risk governance, and privacy programs, ensuring regulatory requirements are met and our technology environment stays secure and resilient.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related discipline.
• Proven experience in cybersecurity, information security, or IT risk management.
• Experience leading security operations, incident response, vulnerability management and governance.
• Strong understanding of cybersecurity frameworks and data protection regulations such as PDPA.

Responsibilities

• Monitor and manage enterprise security tools to identify, investigate, and respond to threats.
• Lead incident response, vulnerability management and remediation with internal teams and vendors.
• Review security posture of systems and applications; ensure timely patching and risk mitigation.
• Lead penetration testing, cybersecurity assessments, and risk reviews; develop security policies and procedures.
• Drive PDPA and privacy regulation compliance; lead audits and security certifications.
• Champion security awareness via phishing simulations and employee training.
• Partner with DPO to strengthen privacy governance and data handling practices.
• Contribute to cybersecurity roadmap and coordination with vendors.

Skills

Cybersecurity

Incident response

Vulnerability management

Risk management

PDPA compliance

Security governance

Communication

Leadership

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Job description

Protect the systems that power our business. Safeguard the data that earns our customers' trust.

At The Hour Glass, cybersecurity is fundamental to protecting our people, customers, and business. We are looking for an experienced Cybersecurity Manager to lead our cybersecurity and data protection initiatives, ensuring our technology environment remains secure, resilient, and compliant with evolving regulatory requirements.

Working closely with the Digital Technology Services (DTS) team, the Data Protection Officer (DPO), business stakeholders, and external partners, you will play a pivotal role in strengthening our security posture, driving compliance, and fostering a culture of cybersecurity awareness across the Group.

What You'll Do

Cybersecurity Operations

• Monitor and manage enterprise security tools to identify, investigate, and respond to security threats


• Lead incident response, vulnerability management, and remediation activities with internal teams and vendors


• Review the security posture of systems and applications, ensuring timely patching and risk mitigation

Risk, Governance & Compliance

• Lead penetration testing, cybersecurity assessments, and risk reviews


• Develop, maintain, and enhance cybersecurity policies, standards, and procedures


• Drive compliance with the Personal Data Protection Act (PDPA) and other applicable security and privacy regulations


• Lead the organisation's Cyber Trust Mark certification and other security audit initiatives

Security Awareness

• Champion a strong cybersecurity culture through phishing simulations, awareness campaigns, and employee training


• Develop regular security reports and dashboards to provide management with insights into cybersecurity risks and initiatives

Data Protection

• Partner with the Data Protection Officer (DPO) to strengthen privacy governance and secure data handling practices


• Support privacy impact assessments, regulatory reviews, audits, and policy development


• Promote best practices for data protection across business functions

Strategic Projects

• Lead cybersecurity projects, including the implementation of new security technologies and compliance initiatives


• Assess third-party security risks and work with vendors to ensure appropriate security controls are in place


• Contribute to the Group's cybersecurity roadmap and long-term technology strategy

What We're Looking For

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related discipline


• Proven experience in cybersecurity, information security, or IT risk management


• Experience leading security operations, incident response, vulnerability management, and security governance initiatives


• Strong understanding of cybersecurity frameworks, risk management, and data protection regulations such as PDPA


• Experience managing penetration testing, security audits, and compliance programmes


• Familiarity with enterprise security technologies, endpoint protection, email security, and vulnerability management platforms


• Relevant cybersecurity certifications (e.g. CISSP, CISM, CEH, Security+, ISO 27001) will be an advantage


• Project management certification (e.g. PMP or PRINCE2) is beneficial

Who You Are

• A strategic thinker who enjoys balancing governance with practical implementation


• Calm and decisive when responding to security incidents and emerging risks


• Strong analytical and problem-solving skills with excellent attention to detail


• An effective communicator who can translate technical concepts for business stakeholders


• A collaborative leader who builds strong relationships across technical and non-technical teams


• Passionate about fostering a security-first culture and driving continuous improvement

Why Join Us?

• Lead cybersecurity initiatives that protect a regional business and its customers


• Drive security strategy, governance, and regulatory compliance across the Group


• Work alongside business leaders and technology teams on meaningful transformation initiatives


• Be part of a collaborative environment that values innovation, continuous learning, and operational excellence