Engineer II, Cybersecurity Governance, Assurance & Data Protection

Circles.Life; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Circles.Life is seeking a Cybersecurity Engineer in Singapore to join the Information & Cybersecurity team. You will report to the Director of Cyber Governance, Assurance & Data Protection and help maintain governance, risk, and privacy programs across Circles and its group entities.

The role emphasizes developing frameworks, ensuring regulatory compliance (ISO27001, GDPR, PDPA), and driving security and privacy across SaaS telco platforms, with a focus on audit readiness and organizational

Qualifications

• Degree in IT, Cyber Security or comparable qualification.
• 3+ years in Audit, Assurance, Governance or related fields.
• Understanding of cybersecurity and data governance for SaaS Telco platforms.
• Excellent written and oral communication with stakeholders.
• Big 4/Tier 2 consulting, Telco industry experience; Cloud security, DevSecOps, microservices; ISO 27001/27701, NIST, COBIT, PCI-DSS; GDPR/PDPA.
• Continuous learning demonstrated by certifications such as CRISC, CISA, CISSP, CDPSE, etc.

Responsibilities

• Governance: develop, mature and operationalize cybersecurity framework and baseline standards.
• Governance: embed best practices in new initiatives and change management.
• Governance: identify and drive risk-adjacent administrative and technical controls.
• Assurance: protect crown jewels per ISO27001, PCI-DSS, PDPA, GDPR.
• Assurance: lead 3PDD reviews and audit readiness activities.
• Assurance: support roadmap to maintain ISO27001, DPTM, APEC CBPR, SOC2.
• Data Protection: develop privacy framework and align with data laws.
• Data Protection: support Data Privacy Office day-to-day; incident investigations.
• Data Protection: drive privacy awareness and training; oversee records of processing.
• Data Protection: promote security culture across the Group.
• Artificial Intelligence: enable ethical AI initiatives.
• Advisory: provide information security, privacy and cybersecurity guidance.

Skills

Audit & Assurance

Governance & Compliance

Cybersecurity knowledge

Communication skills

Cloud Security & DevSecOps

Container security

ISO/IEC standards

GDPR & PDPA knowledge

Certifications: CRISC/CISA/CISSP/CDPSE

Education

Degree in Information Technology or Cyber Security

Job description

Founded in 2014, Circles is a global technology company reimagining the telco industry with its innovative SaaS platform, empowering telco operators worldwide to effortlessly launch innovative digital brands or refresh existing ones, accelerating their transformation into techcos.

Today, Circles partners with leading telco operators across multiple countries and continents, including KDDI Corporation, Etisalat Group (e&), AT&T, and Telkomsel, creating blueprints for future telco and digital experiences enjoyed by millions of consumers globally.

Besides its SaaS business, Circles operates three other distinct businesses:

• Circles.Life: A wholly-owned digital lifestyle telco brand based in Singapore, Circles.Life is powered by Circles’ SaaS platform and pioneering go-to-market strategies. It is the digital market leader in Singapore and has won numerous awards for marketing, customer service, and innovative product offerings beyond connectivity.

• Circles Aspire: A global provider of Communications Platform-as-a-Service (CPaaS) solutions. Its cloud-based Experience Cloud platform enables enterprises, service providers and developers to deliver and scale mobile, messaging, IoT, and connectivity services worldwide.

• Jetpac: Specializing in travel tech solutions, Jetpac provides seamless eSIM roaming for over 200 destinations and innovative travel lifestyle products, redefining connectivity for digital travelers. Jetpac was awarded Travel eSIM of the Year.

Circles is backed by renowned global investors, including Peak XV Partners (formerly Sequoia), Warburg Pincus, Founders Fund, and EDBI (the investment arm of the Singapore Economic Development Board), with a track record of backing industry challengers.

The Role

Reporting to the Director of Cyber Governance, Assurance & Data Protection, this is a backfill role to be based out of Singapore.

As a Cybersecurity Engineer in the subdomain vertical of Information & Cybersecurity Function, the aspiring candidate will have the following responsibilities:

Ensure that Circles and its group entities always maintain a robust, sustainable and adequate governance practices and compliance which spans across.

• [Governance] Develop, mature and operationalize cybersecurity framework, policies, procedures, guidelines and baseline standards within the Group.
• [Governance] Ensure cybersecurity best practices are embedded within new initiatives, ongoing change management and evaluate the security impact of the initiatives.
• [Governance] Identify, risk assess and drive adoption of administrative, technical and procedural measures to safeguard the information assets across the Enterprise.
• [Assurance] Ensure organisational crown jewels are adequately protected in accordance with regulatory and data protection regulations such as ISO27701, PCI-DSS, Market specific Data Protection regulations including PDPA, GDPR.
• [Assurance] Drive internal Risk Assessment including 3rd Party Due Diligence (3PDD) reviews, cybersecurity assurance activities, as well as audit readiness reviews and drive timely resolution of potential gaps.
• [Assurance] Proactively support in organisational roadmap towards maintaining relevant credentials including ISO27001 compliance, DPTM, APEC CBPR and establishing SOC2 compliance report.
• [Data Protection] Develop data privacy and protection framework, enhance existing policies and work programs to align with expectation of relevant data privacy laws.
• [Data Protection] Support the day-to-day functioning of the Data Privacy Office by:
  • Serving as a point of contact within group on issues related to data privacy & protection;
  • Support privacy impact assessments, maintain records of processing activities; Serving as subject matter expert to stakeholders on privacy and data security matters; and
  • Participate in investigation of data privacy incidents.
• [Data Protection] Drive cybersecurity and privacy awareness within the Group, formulating learning curriculum, rolling out training modules ensuring completion remains above agreed metrics. Devise focused training across staff who are involved in data handling and processing.
• [Data Protection] Promote a culture of Security, information protection and compliance mindset across the Group.
• [Artificial Intelligence] Drive relevant and necessary initiatives to enable the stakeholders to adopt artificial intelligence related initiatives in an ethical and responsible manner.
• [Advisory] Provide advisory services on information security, privacy and cybersecurity matters for internal stakeholders as laid out in subsequent sections.

Aspiring Candidate will come with:

• A Degree in Information Technology, Cyber Security or comparable qualification.
• Have 3+ years of professional experience in Audit, Assurance, Governance, Management Consulting or ability to port skills across these functional responsibilities.
• Good understanding of cybersecurity, data governance and assurance initiatives in relation to SaaS based Telco platform delivering B2B and B2C products.
• Excellent written and oral communication skills, confident in having meaningful conversation with stakeholders at multiple levels within the Group.
• Experience, knowledge in the following is a certain plus:
  • Big 4, Tier 2 Consulting Firms, Telco industry.
  • Cloud Infrastructure and Security, DevSecOps, Microservices architecture, Container security.
  • Industry Standards such as ISO 27001, ISO 27701, NIST, COBIT, PCI-DSS, MTCS.
  • Global, Regional data privacy regulations such as GDPR, PDPA, PDPO.
• Cherish continuous learning and demonstrate it with one or more professional certifications such as CRISC, AAISM, AAIR, CGEIT, CDPSE, CDPSE, CSX-P, CISA, CISSP, Diploma in Data Protection or equivalent.

Key Stakeholders

• Verticals/subdomains within Information & Cybersecurity
• Internal B2B and B2C Business Lines
• Product Engineering
• Sales, Revenue, Business Development
• Growth, Customer Happiness, Operations and Marketing
• Government Affairs and Public Policy
• Finance and Legal
• People & Culture

Circles is committed to a diverse and inclusive workplace. We are an equal opportunity employer and do not discriminate on the basis of race, national origin, gender, disability or age.