Manager, Compliance

SMRT Corporation, Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SMRT Corporation, Ltd. is seeking a Manager, Compliance to lead the Governance, Risk and Compliance (GRC) team. You will oversee cybersecurity policies, standards and controls to protect operations and ensure regulatory compliance across the organisation.

The role emphasizes proactive risk management, strong stakeholder engagement and clear reporting to executive leadership. A seasoned professional will drive maturity, awareness and consistent application of cybersecurity requirements.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science or related field.
• 5–10 years of experience in cybersecurity governance, audit, risk management or compliance.
• Familiarity with NIST CSF, ISO/IEC 27001, and CIS Controls will be advantageous.
• Experience conducting risk assessments will be advantageous.
• Knowledge of PDPA, Cybersecurity Code of Practice (CCoP) and sector standards will be advantageous.

Responsibilities

• Manage cybersecurity compliance activities and remediation actions.
• Monitor maturity levels and align with standards/regulatory expectations.
• Coordinate internal cybersecurity compliance activities across business units and systems.
• Investigate control weaknesses and identify root causes with stakeholders.

Skills

Governance, Risk & Compliance

Control assessment & gap analysis

Evidence gathering & reporting

GRC platforms/tools

Education

Bachelor's degree in Cybersecurity, IS, CS or related

Tools

GRC software

Job description

Manager, Compliance

Job Purpose

In today’s rapidly evolving threat landscape, cybersecurity governance is essential to maintaining operational integrity and regulatory compliance. SMRT is seeking a detail-oriented and proactive Manager, Compliance to join our Governance, Risk and Compliance (GRC) team. This role is responsible for ensuring that cybersecurity policies, standards and controls are effectively implemented to manage cybersecurity risks across the organisation.

Responsibilities

• Cybersecurity Compliance
  • Manage, plan and execute cybersecurity compliance activities to assess control effectiveness, identify compliance gaps and recommend remediation actions.
  • Monitor, assess and report cybersecurity maturity levels, ensuring progressive alignment with industry standards and regulatory expectations.
  • Manage and coordinate internal cybersecurity compliance activities, ensuring consistent application of cybersecurity requirements across business units and systems.
  • Investigate identified cybersecurity code of conduct violations or control weaknesses, and work with stakeholders to determine root causes and corrective measures.
• Cybersecurity Awareness & Training
  • Drive the design and delivery of cybersecurity awareness initiatives and training programmes to strengthen organisational cyber resilience.
  • Promote a culture of accountability, risk ownership and cybersecurity-first thinking throughout the organisation.
• Stakeholder Engagement & Reporting
  • Work closely with stakeholders, business units and senior management to communicate group cybersecurity posture and risk exposure.
  • Prepare dashboards, metrics and reports to support governance forums and decision-making.

Qualifications & Work Experience

• A bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related discipline.
• 5–10 years of experience in cybersecurity governance, audit, risk management or compliance.
• Familiarity with cybersecurity frameworks such as NIST CSF, ISO/IEC 27001, and CIS Controls will be advantageous.
• Experience conducting risk assessments will be advantageous.
• Knowledge of regulatory requirements including the Cybersecurity Code of Practice (CCoP), Personal Data Protection Act (PDPA), and sector‑specific standards will be advantageous.

Skills

Technical Skills

• Understanding of cybersecurity governance, risk and compliance principles.
• Ability to assess control effectiveness and identify gaps in policy implementation.
• Skillful in evidence gathering and report writing.
• Familiarity with GRC platforms and tools for tracking compliance and risk metrics.

Core Competencies

• Excellent analytical and documentation skills, with strong attention to detail.
• Effective communicator with the ability to engage stakeholders across technical and non-technical domains.
• High integrity and discretion in handling sensitive information.
• Proactive and collaborative mindset, with a commitment to continuous improvement.