IT Security Manager (Public Sector)

NEWTONE CONSULTING PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NEWTONE CONSULTING PTE. LTD. is seeking an experienced Security Manager to lead cybersecurity governance, risk, compliance, and security operations for large-scale public sector projects in Singapore.

You will collaborate with government stakeholders, auditors, vendors, and technology teams to ensure systems remain secure, compliant, and well-governed throughout the project lifecycle. The role requires strong leadership and a hands-on approach to security improvements.

Qualifications

• Degree in Cybersecurity, Information Security, Computer Science, or related discipline.
• 8 years of cybersecurity experience, with 3–5 years in a leadership/mgmt capacity.
• Strong experience in governance, risk management, compliance, security operations, and security assurance.
• Hands-on experience managing VA/PT, vulnerability remediation, security assessments, and security audits.
• Good understanding of security controls across applications, infrastructure, and enterprise IT environments.
• Experience supporting Singapore Government or highly regulated environments is an advantage.
• Certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Auditor are highly desirable.

Responsibilities

• Lead cybersecurity governance, risk, compliance, and security assurance activities.
• Develop and maintain security policies, standards, procedures, and governance frameworks.
• Manage security assessments, VA/PT, remediation, and audit activities through to closure.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Ensure Secure-by-Design and Security-by-Default principles are incorporated into applications and infrastructure.
• Serve as the key cybersecurity contact for government stakeholders, auditors, vendors, and project teams.
• Identify security risks, recommend mitigation measures, and drive continuous security improvements.
• Lead and mentor security team members while promoting security awareness across project teams.
• Prepare and present updates on security posture, risks, compliance, vulnerabilities, and remediation status to management.

Skills

Cybersecurity governance

Risk management

Compliance

Security operations

Security assurance

Leadership

Stakeholder management

Security reporting

Secure-by-Design

Security awareness

Education

Degree in Cybersecurity/Information Security/CS

Tools

Vulnerability assessment tools

Security audit tools

Threat modeling tools

Job description

Role Summary

We are looking for an experienced Security Manager to lead cybersecurity governance, risk, compliance, and security operations for large-scale public sector projects. You will work closely with government stakeholders, auditors, vendors, and technology teams to ensure systems and infrastructure remain secure, compliant, and well-governed throughout the project lifecycle.

Key Responsibilities

• Lead cybersecurity governance, risk, compliance, and security assurance activities.
• Develop and maintain security policies, standards, procedures, and governance frameworks.
• Manage security assessments, VA/PT, remediation, and audit activities through to closure.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Ensure Secure-by-Design and Security-by-Default principles are incorporated into applications and infrastructure.
• Serve as the key cybersecurity contact for government stakeholders, auditors, vendors, and project teams .
• Identify security risks, recommend mitigation measures, and drive continuous security improvements.
• Lead and mentor security team members while promoting security awareness across project teams.
• Prepare and present updates on security posture, risks, compliance, vulnerabilities, and remediation status to management.

Requirements

• Degree in Cybersecurity, Information Security, Computer Science, or a related discipline.
• 8 years of cybersecurity experience, with at least 3-5 years in a leadership or managerial capacity.
• Strong experience in security governance, risk management, compliance, security operations, and security assurance .
• Hands-on experience managing VA/PT, vulnerability remediation, security assessments, and security audits.
• Good understanding of security controls across applications, infrastructure, and enterprise IT environments.
• Experience supporting Singapore Government or highly regulated environments is an advantage.
• Knowledge of ISO/IEC 27001, ISO 9001, and ISO/IEC 12207 is beneficial.
• Strong stakeholder management, leadership, communication, and reporting skills.
• Certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Auditor are highly desirable.