Cybersecurity Manager

Rajah & Tann Singapore LLP; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Rajah & Tann Singapore LLP is seeking a Cybersecurity Manager to implement and operate the ISMS, assess security controls, and manage third-party risks. The role focuses on embedding cybersecurity into daily processes, conducting risk assessments, and ensuring governance across the firm.

The candidate will collaborate with regional teams, coordinate audits, and drive security awareness programs while leveraging AI responsibly to enhance efficiency and consistency.

Qualifications

• 5+ years in information security or technology risk
• 2+ years assessing technology risks in cloud or SaaS
• Experience with ISMS aligned to ISO/IEC 27001 or NIST CSF
• Experience with third-party due diligence and supplier risk
• Ability to communicate risk to technical and non-technical stakeholders
• Certs such as CISSP / CISM / CRISC are advantageous but not required

Responsibilities

• Maintain and improve the firm's ISMS and compliance
• Carry out cyber risk assessments for technology projects
• Improve processes and use AI responsibly for security
• Manage third-party risk questionnaires and due diligence
• Coordinate audits and evidence reviews
• Review and update information security policies and procedures
• Carry out cybersecurity due diligence on third parties
• Develop information security awareness content
• Prepare reports and admin work for Information Security
• Help with regional cybersecurity work when needed

Skills

Information security

Risk management

ISO 27001

NIST CSF

Cloud security

Vendor risk

Stakeholder comms

Security governance

Education

CISSP

CISM

CRISC

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Job description

This is an exciting time to join Rajah & Tann Singapore LLP, one of Singapore's largest law firms and a member of Rajah & Tann Asia, ASEAN's largest regional network of law firms. We maintain a mature and forward-looking cybersecurity programme and are certified under Singapore's highest cybersecurity certification tier, Cyber Trustmark (Advocate), as well as ISO 27001:2022. As part of our continued digital transformation journey, we are exploring opportunities to leverage AI to enhance the way we work and deliver value to our clients.

About the role

Cybersecurity Manager is a hands‑on role which helps operate our Information Security Management System (“ISMS”). You will help us to embed cybersecurity into our everyday business processes, assess security controls, and help manage third‑party risks.

Key Responsibilities:

• Help maintain and improve firm’s ISMS and compliance to standards.
• Carry out cyber risk assessments in technology projects and keep risk, remediation and action trackers up to date.
• Improve processes and use AI responsibly to make cybersecurity work more efficient and consistent.
• Manage responses to our client’s third‑party risk questionnaires from start to finish. Complete due diligence questionnaires, prepare evidence, coordinate stakeholders, lead client walkthroughs and track agreed actions until they close.
• Coordinate internal and external audits and security assessments. Prepare evidence, review controls and track corrective actions until they close.
• Review and update information security policies, standards and procedures.
• Carry out cybersecurity due diligence on third parties and monitor identified supplier risks.
• Develop, test and deliver clear, engaging information security awareness content and communications.
• Prepare reports and documents and carry out administrative work for the Information Security function.
• Help with regional cybersecurity work when needed.

Requirements

• At least five years of relevant experience in information security, technology risk management, IT governance or IT operations.
• At least two years of experience assessing or managing technology risks in cloud, SaaS or other modern IT environments.
• Experience supporting or operating an Information Security Management System (ISMS) aligned with ISO/IEC 27001, NIST Cybersecurity Framework or an equivalent recognised framework.
• Experience conducting third‑party cybersecurity due diligence or managing supplier security risks, including risks associated with cloud services.
• Experience conducting risk assessments, documenting findings and recommending proportionate controls based on organisational and business needs.
• Experience coordinating with technical and non‑technical stakeholders, with the ability to communicate security requirements, risk findings and remediation actions clearly in writing and verbally.
• Relevant certifications such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor or equivalent are advantageous but not mandatory.

We regret to inform only shortlisted candidates will be contacted.