Data and Cybersecurity Governance

Recruit Express Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Recruit Express Pte Ltd is seeking a cybersecurity governance professional to help develop and maintain policies, standards and risk controls across IT/OT in Singapore.

The role involves monitoring policy compliance, maintaining documentation, performing risk assessments, managing vulnerabilities, supporting incident response, and reporting metrics to strengthen cyber resilience.

Responsibilities

• Support and/or lead the development, implementation and periodic review of cybersecurity policies and governance frameworks.
• Monitor compliance with cybersecurity policies across IT/OT environments.
• Maintain cybersecurity documentation, risk registers and system records; keep them current.
• Conduct cybersecurity risk assessments to identify vulnerabilities and control gaps.
• Support vulnerability management activities, including remediation tracking.
• Provide technical support for cybersecurity technologies and security controls.
• Coordinate incident response, investigation and recovery activities.
• Develop, monitor and report cyber metrics and KRIs for management.
• Contribute to cybersecurity awareness programmes and training initiatives.
• Lead cybersecurity exercises and tabletop simulations to test preparedness.

Job description

• Support and/or lead the development, implementation and periodic review of cybersecurity policies, standards, procedures and governance frameworks to ensure alignment with organisational requirements;
• Monitor compliance with cybersecurity policies and standards across IT/OT environments;
• Maintain cybersecurity-related documentation, including policies, procedures, guidelines, risk registers and system records, and ensure they remain current and accurate;
• Conduct cybersecurity risk assessments and assurance reviews on IT/OT systems to identify vulnerabilities, threats and control gaps;
• Support and/or lead vulnerability management activities, including vulnerability assessments, remediation tracking and reporting;
• Provide technical support in the implementation, administration and maintenance of cybersecurity technologies, platforms and security controls;
• Support and/or lead cybersecurity incident response, investigation and recovery activities;
• Coordinate post-incident reviews and recommend corrective actions to strengthen cybersecurity controls;
• Support cybersecurity awareness programmes, campaigns and training initiatives to promote a strong cybersecurity culture across the organisation;
• Support and/or facilitate cybersecurity exercises, simulations and tabletop exercises to assess organisational preparedness;
• Develop, monitor and report cybersecurity metrics, key risk indicators (KRIs) and key performance indicators (KPIs) for management reporting;
• Support and/or lead initiatives relating to cybersecurity, data governance and AI governance;
• Undertake cybersecurity-related projects and other duties as assigned by reporting manager.