Information Security Manager

Fujitsu Asia Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Fujitsu Asia Pte Ltd. seeks an experienced IT security professional to protect both internal service assets and client-facing managed services. You will lead compliance activities, engage with clients on security metrics, and guide the optimization of the managed security environment.

Responsibilities include developing security policies, incident response planning, and coordinating with stakeholders to enforce risk management across the organization.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field is required.
• Industry-recognized certifications such as CISSP or CISM are highly preferred.
• 5+ years of IT security, risk management, and physical security management experience, preferably MSP/MSSP.

Responsibilities

• Protects both internal service delivery assets and client facing managed services
• Compliance & Auditing: Ensure strict alignment with industry-standard frameworks (e.g., ISO 27001, PCI-DSS). Lead governance adherence, internal audits, and external client compliance assessments
• Stakeholder & Client Management: Serve as the primary point of contact for client security inquiries, presenting security metrics, risks, and proposed mitigation controls
• Direct engagement with customer to provide technical expertise and guidance regarding the optimization of the managed security environment
• Policies and Governance: Review security policies of the existing environment; develop and enforce InfoSec policies, cybersecurity roadmaps, and incident response plans
• Develop, implement, and maintain the firm\'s information security framework, policies, and risk management plans
• Operational and Implementation: Establish and upgrade cybersecurity measures to protect networks and systems; coordinate rapid triage, response, and post-mortems for breaches
• Execute existing configurations and security policies; identify areas of improvement; provide analysis reports
• Create Security Awareness: Collect materials and prepare for security awareness training
• Vendor Management: Manage third-party technology vendor licensing, relationships, and budget planning

Skills

Stakeholder management

Crisis leadership

Problem-solving

Education

Bachelor's degree in Computer Science, Cybersecurity, or a related field

CISSP or CISM certification

Tools

SIEM

SOAR

EDR/XDR

Firewalls

Vulnerability management

Job description

Responsibilities

• Protects both internal service delivery assets and client facing managed services
• Compliance & Auditing: Ensure strict alignment with industry-standard frameworks (e.g., ISO 27001, PCI-DSS). Lead governance adherence, internal audits, and external client compliance assessments
• Stakeholder & Client Management:
• Serve as the primary point of contact for client security inquiries, presenting security metrics, risks, and proposed mitigation controls
• Direct engagement with customer to provide technical expertise and guidance regarding the optimization of the managed security environment
• Policies and Governance:
• Work closely with stakeholders, review security policies of the existing environment
• Direct the development, implementation, and enforcement of InfoSec policies, cybersecurity roadmaps, and incident response plans
• Develop, implement, and maintain the firm\'s sustainable information security framework, policies, and risk management plans
• Operational and Implementation:
• Establishes, implements, and upgrades an organization’s cybersecurity measures to protect networks and systems from potential attacks
• Coordinate rapid triage, response, and post-mortems for any security breaches or service disruptions
• Execute existing configurations, security policies and identify areas of improvement
• Provide analysis report on existing current and areas of improvement
• Create Security Awareness:
• Collect existing materials of security awareness. Prepare for the security awareness training
• Vendor Management: Manage third-party technology vendor licensing, relationships, and budget planning

Key Requirements & Qualifications

• Education & Certifications: Bachelor’s degree in Computer Science, Cybersecurity, or a related field. Industry-recognized certifications such as CISSP or CISM are highly preferred
• Experience: 5+ years of combined experience in IT security, risk management, and physical security management, preferably within a Managed Service Provider (MSP/MSSP) setting
• Technical Acumen: Strong knowledge of security architecture, including SIEM, SOAR, EDR/XDR, firewalls, and vulnerability management
• Soft Skills: Exceptional stakeholder management, crisis leadership, and problem-solving abilities to navigate complex, fast-paced environments