Manager, Compliance

SMRT Corporation, Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SMRT Corporation Ltd in Singapore is seeking a Manager, Compliance to join our Governance, Risk and Compliance (GRC) team. You will oversee cybersecurity policies, standards and controls across the organisation to manage cyber risk and ensure regulatory alignment.

The role requires a proactive, detail-oriented professional with 5–10 years in cybersecurity governance or compliance, familiarity with NIST CSF, ISO/IEC 27001, and PDPA-related requirements, and strong stakeholder engagement across

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science or related discipline.
• 5–10 years of experience in cybersecurity governance, audit, risk management or compliance.
• Familiarity with cybersecurity frameworks such as NIST CSF, ISO/IEC 27001 and CIS Controls advantageous.
• Experience conducting risk assessments advantageous.
• Knowledge of regulatory requirements including the Cybersecurity Code of Practice (CCoP) and PDPA advantageous.

Responsibilities

• Cybersecurity Compliance: manage and execute activities to assess control effectiveness, identify gaps and drive remediation.
• Cybersecurity Awareness & Training: design and deliver awareness initiatives and training to strengthen cyber resilience.
• Stakeholder Engagement & Reporting: communicate group cybersecurity posture and prepare dashboards and reports for governance forums.

Skills

Governance & compliance

Risk assessment

Policy implementation

GRC tools

Education

Bachelor’s degree in Cybersecurity/IS/CS

Tools

GRC platforms

Job description

Manager, Compliance

Job Purpose

In today’s rapidly evolving threat landscape, cybersecurity governance is essential to maintaining operational integrity and regulatory compliance. SMRT is seeking a detail-oriented and proactive Manager, Compliance to join our Governance, Risk and Compliance (GRC) team. This role is responsible for ensuring that cybersecurity policies, standards and controls are effectively implemented to manage cybersecurity risks across the organisation.

Responsibilities

• Cybersecurity Compliance
  • Manage, plan and execute cybersecurity compliance activities to assess control effectiveness, identify compliance gaps and recommend remediation actions.
  • Monitor, assess and report cybersecurity maturity levels, ensuring progressive alignment with industry standards and regulatory expectations.
  • Manage and coordinate internal cybersecurity compliance activities, ensuring consistent application of cybersecurity requirements across business units and systems.
  • Investigate identified cybersecurity code of conduct violations or control weaknesses, and work with stakeholders to determine root causes and corrective measures.
• Cybersecurity Awareness & Training
  • Drive the design and delivery of cybersecurity awareness initiatives and training programmes to strengthen organisational cyber resilience.
  • Promote a culture of accountability, risk ownership and cybersecurity-first thinking throughout the organisation.
• Stakeholder Engagement & Reporting
  • Work closely with stakeholders, business units and senior management to communicate group cybersecurity posture and risk exposure.
  • Prepare dashboards, metrics and reports to support governance forums and decision-making.

Qualifications & Work Experience

• A bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related discipline.
• 5–10 years of experience in cybersecurity governance, audit, risk management or compliance.
• Familiarity with cybersecurity frameworks such as NIST CSF, ISO/IEC 27001, and CIS Controls will be advantageous.
• Experience conducting risk assessments will be advantageous.
• Knowledge of regulatory requirements including the Cybersecurity Code of Practice (CCoP), Personal Data Protection Act (PDPA), and sector-specific standards will be advantageous.

Skills

Technical Skills include:

• Understanding of cybersecurity governance, risk and compliance principles.
• Ability to assess control effectiveness and identify gaps in policy implementation.
• Skilled in evidence gathering and report writing.
• Familiarity with GRC platforms and tools for tracking compliance and risk metrics.

Core Competencies include:

• Excellent analytical and documentation skills, with strong attention to detail.
• Effective communicator with the ability to engage stakeholders across technical and non-technical domains.
• High integrity and discretion in handling sensitive information.
• Proactive and collaborative mindset, with a commitment to continuous improvement

About SMRT Corporation

SMRT Corporation Ltd (SMRT) is a public transport services provider. Our primary business is to manage and operate train services on the North-South Line, theEast-West Line, the Circle Line, the new Thomson East-Coast Line and the Bukit Panjang Light Rail Transit. This is complemented by our bus, taxi and private hire vehicle services.

An exciting and rewarding career is waiting for you at SMRT. Join us and embark on a journey that matters. You Matter – we take care of you and your well-being. Your Work Matters – your ideas and contributions work towards building the future of our transport system and create positive impacts to the community. Your Development Matters – we offer diverse careers and learning opportunities for our people to grow you to the fullest of your potential.

Come onboard the SMRT journey today.

Vision

Moving People. Enhancing Lifestyles

Core Values

Respect, Integrity, Safety & Service, Excellence