Head of Cyber Defence (SecOps)

SPH Media Limited; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

SPH Media Limited is seeking a Senior Cyber Security Leader to drive security operations, threat detection, and incident response across enterprise systems and media workflows.

You will oversee a security team, coordinate with MSSPs, and continuously enhance detection, investigation, and response capabilities while aligning with international standards and governance requirements.

Qualifications

• Experience leading security operations teams and coordinating with MSSPs/ SOC providers.
• Proven ability to enhance threat detection, investigation, and response processes.
• Strong background in real-time threat monitoring, threat hunting, and incident triage.

Responsibilities

• Lead a team of 4-5 security analysts and manage external MSSPs/SOC providers.
• Own and improve threat detection, investigation, and response workflows with automation.
• Oversee real-time monitoring, threat hunting, and incident triage to mitigate risks.
• Develop proactive threat intelligence and integrate into SecOps processes.

Skills

Security leadership

Threat detection

Incident response

SIEM/EDR

Threat hunting

Threat intelligence

Cloud/DevOps collaboration

Governance & compliance

KPI reporting

Tools

Firewalls

Intrusion detection systems

Encryption technologies

Identity management systems

Job description

The scope of responsibilities includes the following:

• Lead and manage a team of 4-5 security analysts, as well as external MSSPs and SOC providers.

• Own and continuously enhance threat detection, investigation, and response processes using modern tooling and automation.

• Oversee real-time threat monitoring, threat hunting, and incident triage to identify and mitigate risks promptly.

• Develop and integrate proactive threat intelligence into SecOps processes and security technologies.

• Serve as a key escalation point (role of SIRM) for security incidents and lead incident response, root cause analysis, and post-incident reporting.

• Lead the continuous improvement of detection rules, correlation logic, and threat-hunting techniques across SIEM and EDR platforms.

• Collaborate with Cloud, DevOps, and IT teams to ensure security is embedded in enterprise systems and media production workflows.

• Stay ahead of emerging threats, TTPs, and relevant threat actor campaigns, especially those targeting the media industry.

• Define, track, and report operational metrics and KPIs to senior leadership.

• Ensure compliance with relevant frameworks, standards, and regulations (e.g., NIST, ISO/IEC 27001, GDPR, SOC 2).

• Work with Infrastructure teams on the design, implementation, and maintenance of security solutions, including firewalls, intrusion detection systems, encryption technologies, and identity management systems.

• Establish and regularly test incident response playbooks, escalation procedures, crisis management processes, and recovery plans.

• Cyber Threat Intelligence:

  • Lead efforts to continuously monitor the threat landscape and provide timely insights on emerging threats and vulnerabilities.

  • Build relationships with external stakeholders, including threat intelligence sharing communities, government agencies, and security vendors, to strengthen organisational defences.

• Own and manage relevant security contracts, procurement activities, and projects, including collaborating with other teams to implement and roll out new tools under the Cyber Defence Team.

• Perform other duties as assigned by the CISO.