ISMS & Cyber Risk Manager - AI-Driven Security & Compliance

Rajah & Tann Singapore LLP; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Rajah & Tann Singapore LLP is seeking a Cybersecurity Manager to implement and operate the ISMS, assess security controls, and manage third-party risks. The role focuses on embedding cybersecurity into daily processes, conducting risk assessments, and ensuring governance across the firm.

The candidate will collaborate with regional teams, coordinate audits, and drive security awareness programs while leveraging AI responsibly to enhance efficiency and consistency.

Qualifications

• 5+ years in information security or technology risk
• 2+ years assessing technology risks in cloud or SaaS
• Experience with ISMS aligned to ISO/IEC 27001 or NIST CSF
• Experience with third-party due diligence and supplier risk
• Ability to communicate risk to technical and non-technical stakeholders
• Certs such as CISSP / CISM / CRISC are advantageous but not required

Responsibilities

• Maintain and improve the firm's ISMS and compliance
• Carry out cyber risk assessments for technology projects
• Improve processes and use AI responsibly for security
• Manage third-party risk questionnaires and due diligence
• Coordinate audits and evidence reviews
• Review and update information security policies and procedures
• Carry out cybersecurity due diligence on third parties
• Develop information security awareness content
• Prepare reports and admin work for Information Security
• Help with regional cybersecurity work when needed

Skills

Information security

Risk management

ISO 27001

NIST CSF

Cloud security

Vendor risk

Stakeholder comms

Security governance

Education

CISSP

CISM

CRISC

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Job description

Rajah & Tann Singapore LLP is seeking a Cybersecurity Manager to implement and operate the ISMS, assess security controls, and manage third-party risks. The role focuses on embedding cybersecurity into daily processes, conducting risk assessments, and ensuring governance across the firm.

The candidate will collaborate with regional teams, coordinate audits, and drive security awareness programs while leveraging AI responsibly to enhance efficiency and consistency.