Information Technology - Cyber Security Specialist (Risk and Governance)

SINGAPORE AIRLINES LIMITED; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

An international airline company based in Singapore is seeking a skilled professional for the Group Information Security Team. This role focuses on cyber governance, risk management, and ensuring the protection of corporate applications and systems against cyber threats. Candidates should have a degree in IT with 4-5 years of relevant experience, ideally in application security. Strong communication and analytical skills are essential. The position offers the opportunity to manage compliance and drive cybersecurity initiatives.

Qualifications

• 4-5 years of relevant information security working experience, especially in application security.
• Professional security certifications preferred (CISSP, CISA, CEH).
• Familiarity with PCI, PDPA, GDPR requirements.
• Strong knowledge of security technologies and practices.

Responsibilities

• Provide cyber governance and risk management oversight.
• Develop compliance program for existing infrastructure assessments.
• Conduct risk assessments and document results.
• Manage third-party cyber risk assessment standards.

Skills

Governance, Risk and Compliance (GRC)

Cybersecurity knowledge

Communication skills

Analytical skills

Teamwork

Education

Degree in IT or related field

Job description

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self‑assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program to routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third‑party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group.

Requirements

• Degree in IT or related fields, with 4‑5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc.) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements.
• Experience in security technologies, practices, application/network/systems architecture and design, test tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and interpersonal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high‑priority issues.
• Able to work independently and in a team‑oriented, collaborative environment.