IT Governance- Assistant Manager

Ambition Group Singapore Pte. Ltd. (SG); Singapore; On-site; USD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a dynamic professional to lead operational cyber governance. In this role, you will ensure that security, compliance, and governance practices are not just theoretical but practical and effective. Your expertise will guide senior stakeholders and teams in managing risks while maintaining compliance with cybersecurity regulations. You will be instrumental in building a robust cybersecurity roadmap and improving risk management frameworks, making a real impact on the organization's security posture. If you're ready to take on a hands-on role that values your insights and experience, this opportunity is for you.

Qualifications

• 3+ years of experience in cybersecurity governance, risk, or compliance.
• Strong knowledge of IT governance and security frameworks.

Responsibilities

• Ensure IT & OT governance frameworks are up to date and effective.
• Guide teams on managing risks and compliance without overcomplicating.

Skills

Cybersecurity Governance

Risk Management

Compliance

IT Governance Frameworks

Communication Skills

Education

Degree in Computer Science

Project Management Certification

Tools

ISO 27001

IEC 62443

NIST

Job description

Our client needs someone who understands operational cyber governance—not just the theory, but how it works day to day. You’ll be the go-to person ensuring security, compliance, and governance actually work in practice, rather than just ticking boxes.

You'll spend a lot of time working with senior stakeholders, so having a good attitude and the ability to explain things without the tech jargon is key.

What you’ll be doing:

• Making sure IT & OT governance frameworks are up to date and actually useful.

• Helping the CISO build a cybersecurity roadmap that makes sense for the business.

• Keeping IT projects in check—security and governance need to be followed, not ignored.

• Guiding teams on how to manage risks and compliance without overcomplicating things.

• Leading external audits (cybersecurity, regulatory) without breaking a sweat.

• Working closely with regulatory agencies—you’ll be the one making sure everything stays above board.

• Building and improving the risk management framework so it works for real-world operations.

What you’ll need:

• At least 3 years of experience in cybersecurity governance, risk, or compliance.

• Hands-on attitude—this isn’t a sit-back-and-observe role.

• Confidence to deal with senior leaders and explain things clearly.

• Strong knowledge of IT governance, risk, and security frameworks (ISO 27001, IEC 62443, NIST).

• A solid understanding of cybersecurity regulations—you’ll be the one keeping things compliant.

Bonus points if you have:

• A degree in Computer Science, Engineering, or something similar.

• Project management certs (PMP, PRINCE2, CAPM) – useful but not essential.

• Security certs like CISM, CISA, CISSP, CGEIT, CRISC – nice to have, but we’re more interested in what you can do.