IT Security Manager

Newtone Consulting; Singapore; On-site; SGD 180,000 - 230,000; Full time

Job summary

Newtone consulting is seeking an experienced Security Manager to lead governance, risk, compliance, and operational security for large-scale public sector projects in Singapore.

You will partner with government stakeholders, auditors, vendors, and technology teams to ensure systems maintain a strong, compliant security posture throughout their lifecycle.

Qualifications

• 8+ years of cybersecurity experience.
• Strong governance, risk, and compliance expertise.
• Experience leading teams in security operations and assurance.
• Skilled in security audits, vulnerability assessments, and remediation.
• Familiar with ISO 27001 / ISO 9001 / ISO 12207 and regulatory environments.
• Certifications such as CISSP, CISM, CRISC, CCSP are desirable.

Responsibilities

• Lead cybersecurity governance, risk management, compliance, and security assurance activities.
• Establish and maintain security policies, standards, procedures, and governance frameworks.
• Manage security accreditation activities including VA/PT, security assessments, remediation, and closure.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Ensure security controls and Secure-by-Design / Security-by-Default principles are implemented.
• Act as the primary cybersecurity contact for government agencies, auditors, vendors, and project stakeholders.
• Identify security risks and drive mitigation and continuous improvement initiatives.
• Lead and mentor cybersecurity personnel and promote security awareness across project teams.
• Provide management with security posture, risk, compliance, and remediation updates.

Skills

Cybersecurity experience

Leadership

Stakeholder management

Governance

Risk management

Compliance

Security operations

Communication

Education

Degree in Cybersecurity or related discipline

Job description

We are looking for an experienced Security Manager to lead cybersecurity governance, risk, compliance, and operational security for large-scale public sector projects. You will work closely with government stakeholders, auditors, vendors, and technology teams to ensure systems and infrastructure maintain a strong and compliant security posture throughout their lifecycle.

Key Responsibilities

• Lead cybersecurity governance, risk management, compliance, and security assurance activities.
• Establish and maintain security policies, standards, procedures, and governance frameworks.
• Manage security accreditation activities including VA/PT, security assessments, remediation, and closure.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Ensure security controls and Secure-by-Design / Security-by-Default principles are implemented across applications and infrastructure.
• Act as the primary cybersecurity contact for government agencies, auditors, vendors, and project stakeholders.
• Identify security risks and drive appropriate mitigation and continuous improvement initiatives.
• Lead and mentor cybersecurity personnel and promote security awareness across project teams.
• Provide management with security posture, risk, compliance, and remediation updates.

Requirements

• Degree in Cybersecurity, Information Security, Computer Science, or related discipline.
• 8+ years of cybersecurity experience, including 3-5 years in a leadership role.
• Strong experience in cybersecurity governance, risk, compliance, security operations, and assurance.
• Experience managing vulnerability assessments, penetration testing, remediation, and security audits.
• Good understanding of security controls across applications, infrastructure, and enterprise environments.
• Experience with Government or other highly regulated environments is advantageous.
• Knowledge of ISO/IEC 27001, ISO 9001 and ISO/IEC 12207 is beneficial.
• Strong stakeholder management, leadership, communication, and reporting skills.
• Certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 Lead Auditor are highly desirable.