Information Technology Security Manager

Newtone Consulting; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Newtone Consulting in Singapore is seeking an experienced Security Manager to lead governance, risk, compliance, and operations for major public sector programs. You will work with government agencies, auditors, vendors and technology teams to maintain a strong security posture throughout the lifecycle.

The ideal candidate will hold a degree in cybersecurity or related field, 8+ years in cybersecurity with 3–5 years in leadership, and relevant certifications (CISSP, CISM, CRISC, CCSP or ISO

Qualifications

• 8+ years of cybersecurity experience, including 3-5 years in a leadership role.
• Experience governance, risk, compliance, security operations, and assurance.
• Experience with government or regulated environments is advantageous.
• Knowledge of ISO/IEC 27001, ISO 9001 and ISO/IEC 12207 is beneficial.
• Certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 Lead Auditor are desirable.

Responsibilities

• Lead governance, risk management, compliance, and security assurance activities.
• Establish and maintain security policies, standards, procedures, and governance frameworks.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Act as primary cybersecurity contact for government agencies, auditors, vendors, and stakeholders.
• Identify security risks and drive mitigation and continuous improvement initiatives.
• Lead and mentor cybersecurity personnel and promote security awareness.

Skills

Cybersecurity leadership

Governance

Risk management

Security operations

Compliance

Security reporting

Education

Degree in Cybersecurity, Information Security, Computer Science, or related discipline

Job description

We are looking for an experienced Security Manager to lead cybersecurity governance, risk, compliance, and operational security for large-scale public sector projects. You will work closely with government stakeholders, auditors, vendors, and technology teams to ensure systems and infrastructure maintain a strong and compliant security posture throughout their lifecycle.

Key Responsibilities

• Lead cybersecurity governance, risk management, compliance, and security assurance activities.
• Establish and maintain security policies, standards, procedures, and governance frameworks.
• Manage security accreditation activities including VA/PT, security assessments, remediation, and closure.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Ensure security controls and Secure-by-Design / Security-by-Default principles are implemented across applications and infrastructure.
• Act as the primary cybersecurity contact for government agencies, auditors, vendors, and project stakeholders.
• Identify security risks and drive appropriate mitigation and continuous improvement initiatives.
• Lead and mentor cybersecurity personnel and promote security awareness across project teams.
• Provide management with security posture, risk, compliance, and remediation updates.

Requirements

• Degree in Cybersecurity, Information Security, Computer Science, or related discipline.
• 8+ years of cybersecurity experience, including 3-5 years in a leadership role.
• Strong experience in cybersecurity governance, risk, compliance, security operations, and assurance.
• Experience managing vulnerability assessments, penetration testing, remediation, and security audits.
• Good understanding of security controls across applications, infrastructure, and enterprise environments.
• Experience with Government or other highly regulated environments is advantageous.
• Knowledge of ISO/IEC 27001, ISO 9001 and ISO/IEC 12207 is beneficial.
• Strong stakeholder management, leadership, communication, and reporting skills.
• Certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 Lead Auditor are highly desirable.