IT Security Manager (Public Sector)

NEWTONE CONSULTING PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

NEWTONE CONSULTING PTE. LTD. is seeking an experienced Security Manager to lead governance, risk, compliance, and security operations for large-scale public sector projects in Singapore.

You will collaborate with government stakeholders, auditors, vendors, and technology teams to keep systems secure, compliant, and well-governed throughout the project lifecycle. The role demands hands-on leadership, strong expertise in VA/PT, vulnerability remediation, and audits, and the ability to drive

Qualifications

• Degree in Cybersecurity, Information Security, Computer Science, or related discipline.
• 8 years of cybersecurity experience with 3–5 years in a leadership or managerial capacity.
• Strong experience in governance, risk management, compliance, security operations, and security assurance.
• Hands-on experience managing VA/PT, vulnerability remediation, security assessments, and security audits.
• Experience supporting Singapore Government or highly regulated environments is an advantage.
• Certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Auditor are highly desirable.

Responsibilities

• Lead cybersecurity governance, risk, compliance, and security assurance activities.
• Develop and maintain security policies, standards, procedures, and governance frameworks.
• Manage security assessments, VA/PT, remediation, and audit activities through to closure.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Ensure Secure-by-Design and Security-by-Default principles are incorporated into applications and infrastructure.
• Serve as the key cybersecurity contact for government stakeholders, auditors, vendors, and project teams.
• Identify security risks, recommend mitigation measures, and drive continuous security improvements.
• Lead and mentor security team members while promoting security awareness across project teams.
• Prepare and present updates on security posture, risks, compliance, vulnerabilities, and remediation status to management.

Skills

Governance

Risk Management

Compliance

Security Operations

Security Assurance

VA/PT

Audits

Leadership

Stakeholder Management

Security Architecture

Education

Cybersecurity degree

Job description

Role Summary

We are looking for an experienced Security Manager to lead cybersecurity governance, risk, compliance, and security operations for large-scale public sector projects.

You will work closely with government stakeholders, auditors, vendors, and technology teams to ensure systems and infrastructure remain secure, compliant, and well-governed throughout the project lifecycle.

Key Responsibilities

• Lead cybersecurity governance, risk, compliance, and security assurance activities.
• Develop and maintain security policies, standards, procedures, and governance frameworks.
• Manage security assessments, VA/PT, remediation, and audit activities through to closure.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Ensure Secure-by-Design and Security-by-Default principles are incorporated into applications and infrastructure.
• Serve as the key cybersecurity contact for government stakeholders, auditors, vendors, and project teams.
• Identify security risks, recommend mitigation measures, and drive continuous security improvements.
• Lead and mentor security team members while promoting security awareness across project teams.
• Prepare and present updates on security posture, risks, compliance, vulnerabilities, and remediation status to management.

Requirements

• Degree in Cybersecurity, Information Security, Computer Science, or a related discipline.
• 8 years of cybersecurity experience, with at least 3–5 years in a leadership or managerial capacity.
• Strong experience in security governance, risk management, compliance, security operations, and security assurance.
• Hands-on experience managing VA/PT, vulnerability remediation, security assessments, and security audits.
• Good understanding of security controls across applications, infrastructure, and enterprise IT environments.
• Experience supporting Singapore Government or highly regulated environments is an advantage.
• Knowledge of ISO/IEC 27001, ISO 9001, and ISO/IEC 12207 is beneficial.
• Strong stakeholder management, leadership, communication, and reporting skills.
• Certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Auditor are highly desirable.