IT Security manager

NEWTONE CONSULTING PTE. LTD.; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

NEWTONE CONSULTING PTE. LTD. is seeking an experienced Security Manager to lead cybersecurity governance, risk, compliance and operational security for large-scale public sector projects in Singapore.

You will collaborate with government stakeholders, auditors, vendors and technology teams to maintain a strong security posture throughout project lifecycles. The role requires 8+ years in cybersecurity with 3–5 years in leadership, deep expertise in risk management, security operations and

Qualifications

• Degree in Cybersecurity, Information Security, CS, or related discipline.
• 8+ years of cybersecurity experience, incl. 3–5 years in leadership.
• Strong governance, risk, compliance, operations and assurance experience.
• Experience with vulnerability assessments, penetration testing, remediation and audits.
• Understanding of security controls for apps, infra and enterprise environments.
• Experience with Singapore Government or highly regulated environments is advantageous.
• Knowledge of ISO/IEC 27001, ISO 9001 and ISO/IEC 12207 is beneficial.
• Strong stakeholder management, leadership, communication and reporting.
• Certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 Lead Auditor desirable.

Responsibilities

• Lead cybersecurity governance, risk management, compliance and security assurance.
• Establish and maintain security policies, standards, procedures and governance frameworks.
• Manage security accreditation activities including VA/PT, security assessments, remediation and closure.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Ensure security controls and Secure-by-Design/ Security-by-Default principles are implemented across applications and infrastructure.
• Act as the primary cybersecurity contact for government agencies, auditors, vendors, and project stakeholders.
• Identify security risks and drive appropriate mitigation and continuous improvement initiatives.
• Lead and mentor cybersecurity personnel and promote security awareness across project teams.
• Provide management with security posture, risk, compliance, and remediation updates.

Education

Degree in Cybersecurity, Information Security, Computer Science, or related discipline

Job description

We are looking for an experienced Security Manager to lead cybersecurity governance, risk, compliance, and operational security for large-scale public sector projects. You will work closely with government stakeholders, auditors, vendors, and technology teams to ensure systems and infrastructure maintain a strong and compliant security posture throughout their lifecycle.

Key Responsibilities

• Lead cybersecurity governance, risk management, compliance, and security assurance activities.
• Establish and maintain security policies,standards, procedures, and governance frameworks.
• Manage security accreditation activitiesincluding VA/PT, security assessments, remediation, and closure .
• Oversee vulnerability management, patchgovernance, security monitoring, and incident response.
• Ensure security controls and Secure-by-Design/ Security-by-Default principles are implemented across applicationsand infrastructure.
• Act as the primary cybersecurity contact forgovernment agencies, auditors, vendors, and project stakeholders.
• Identify security risks and drive appropriatemitigation and continuous improvement initiatives.
• Lead and mentor cybersecurity personnel andpromote security awareness across project teams.
• Provide management with security posture, risk,compliance, and remediation updates.

Requirements

• Degree in Cybersecurity, Information Security,Computer Science, or related discipline.
• 8+ years of cybersecurity experience ,including 3-5 years in a leadership role.
• Strong experience in cybersecuritygovernance, risk, compliance, security operations, and assurance .
• Experience managing vulnerability assessments,penetration testing, remediation, and security audits.
• Good understanding of security controls acrossapplications, infrastructure, and enterprise environments.
• Experience with Singapore Government or otherhighly regulated environments is advantageous.
• Knowledge of ISO/IEC 27001, ISO 9001 andISO/IEC 12207 is beneficial.
• Strong stakeholder management, leadership,communication, and reporting skills.
• Certifications such as CISSP, CISM,CRISC, CCSP or ISO 27001 Lead Auditor are highly desirable.