Information Technology Security Manager

Kerry Consulting; Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

Kerry Consulting is partnering with a large global consumer business in Singapore to recruit a Technical Security & Risk Manager who will own cybersecurity and technology risk across local operations. This role spans both technical security and risk, not limited to GRC.

You will collaborate with technology and business teams to implement controls, manage incidents, conduct risk assessments, and support PCI DSS, PDPA, ISO 27001 and NIST frameworks while coordinating with regional security

Qualifications

• Experience spanning security operations and technology risk
• Familiarity with PCI DSS, PDPA, ISO 27001 and/NIST
• Ability to communicate risks to technical and non-technical stakeholders

Responsibilities

• Own cybersecurity and technology risk across Singapore operations
• Oversee incident response, vulnerability management, endpoint security
• Support audits and compliance with ISO 27001, PCI DSS, NIST
• Collaborate with regional/global security stakeholders to implement standards
• Assist in business continuity and cyber incident readiness

Skills

Technical security foundation

Broad cybersecurity & technology risk

Security operations exposure

SIEM/XDR/EDR awareness

Risk assessments & remediation

PCI DSS & ISO 27001 familiarity

Tools

SIEM/XDR/EDR

Job description

My client is looking for a Technical Security & Risk Manager to take ownership of cybersecurity and technology risk across its Singapore operations. This is a broad role within a large global consumer business, covering both technical security and risk rather than sitting purely within GRC or security operations.

The Role

You will be responsible for:

• Managing cybersecurity and technology risk, including risk assessments, security controls, remediation and ongoing risk monitoring.
• Overseeing key areas of security including incident response, vulnerability management, endpoint security, SIEM/XDR and threat management.
• Supporting compliance with PCI DSS, PDPA and established security frameworks such as ISO 27001 and NIST.
• Working closely with technology and business teams to identify security risks and ensure appropriate controls and remediation are in place.
• Supporting business continuity, disaster recovery, third-party security risk and cyber incident readiness.
• Working with regional and global security stakeholders to ensure security standards are effectively implemented within the Singapore business.

Ideal Profile

• Ideally, someone with a strong technical security foundation who has moved into broader cybersecurity and technology risk ownership.
• Experience across both security operations and technology risk, rather than being purely GRC or purely operational security.
• Good exposure to areas such as SIEM/XDR/EDR, vulnerability management, incident response, cyber risk assessments and security controls.
• Familiarity with PCI DSS, PDPA, ISO 27001 and/or NIST, including experience supporting audits and compliance requirements.
• Comfortable working with both technical and business stakeholders, with the ability to explain cybersecurity risks clearly and drive remediation.

Why Consider This Opportunity?

Take on a role covering the fuller cybersecurity landscape, from technical security and incidents through to risk, governance, compliance and resilience. Work within a large global consumer environment where security supports customer-facing digital platforms, payments and day-to-day business operations. Gain exposure to both Singapore and global security stakeholders, while having direct ownership of local cybersecurity and technology-risk priorities.