Manager, Compliance

SMRT Trains Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SMRT Trains Ltd in Singapore seeks a detail-oriented Manager, Compliance to join our Governance, Risk & Compliance team. You will lead the development and implementation of a robust cybersecurity governance framework across the organisation, ensuring policies and controls meet regulatory expectations.

You will monitor maturity levels, coordinate across business units and drive awareness and training to strengthen cyber resilience, reporting to senior management and enabling informed governance

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related discipline.
• 5–10 years of experience in cybersecurity governance, audit, risk management or compliance.
• Familiarity with cybersecurity frameworks such as NIST CSF, ISO/IEC 27001 and CIS Controls.
• Knowledge of regulatory requirements including PDPA and sector-specific standards.

Responsibilities

• Manage, plan and execute cybersecurity compliance activities to assess control effectiveness, identify gaps and recommend remediation actions.
• Monitor, assess and report cybersecurity maturity levels, aligning with industry standards and regulatory expectations.
• Coordinate internal cybersecurity compliance activities across business units and systems.
• Investigate identified cybersecurityCode of Conduct violations or control weaknesses, determine root causes and corrective measures.
• Drive cybersecurity awareness initiatives and training programmes to strengthen organisational cyber resilience.
• Prepare dashboards, metrics and reports to support governance forums and decision-making.

Skills

Cybersecurity governance

Risk assessment

Policy implementation

GRC tools

Education

Bachelor's degree in Cybersecurity/Information Systems/CS

Tools

GRC platforms

Job description

Company description:

SMRT Trains Ltd was incorporated in 1987 and operates Singapore's first mass rapid transit system. Today, we manage and operate train services on the North-South Line, East-West Line, the Circle Line, the Thomson-East Coast Line, and the Bukit Panjang Light Rail Transit. With over 5,000 employees, more than 250 trains, and 141 km of rail tracks across 108 stations, we serve millions of commuters daily.

We have set our core values to be Integrity, Service & Safety and Excellence. SMRT is committed to provide safe, reliable and comfortable service for our commuters.

Job description:

Job Purpose

In today's rapidly evolving threat landscape, cybersecurity governance is essential to maintaining operational integrity and regulatory compliance. SMRT is seeking a detail-oriented and proactive Manager, Compliance to join our Governance, Risk & Compliance (GRC) team. This role is responsible for ensuring that cybersecurity policies, standards and controls are effectively implemented to manage cybersecurity risks across the organisation.

Responsibilities

As Manager, Compliance, you will support Head, Governance, Risk & Compliance in managing, developing and implementing a robust cybersecurity governance, risk and compliance framework and strengthening organisational resilience. Your responsibilities include:

• Cybersecurity Compliance
  • Manage, plan and execute cybersecurity compliance activities to assess control effectiveness, identify compliance gaps and recommend remediation actions.
  • Monitor, assess and report cybersecurity maturity levels, ensuring progressive alignment with industry standards and regulatory expectations.
  • Manage and coordinate internal cybersecurity compliance activities, ensuring consistent application of cybersecurity requirements across business units and systems.
  • Investigate identified cybersecurity code of conduct violations or control weaknesses, and work with stakeholders to determine root causes and corrective measures.
• Cybersecurity Awareness & Training
  • Drive the design and delivery of cybersecurity awareness initiatives and training programmes to strengthen organisational cyber resilience.
  • Promote a culture of accountability, risk ownership and cybersecurity-first thinking throughout the organisation.
• Stakeholder Engagement & Reporting
  • Work closely with stakeholders, business units and senior management to communicate group cybersecurity posture and risk exposure.
  • Prepare dashboards, metrics and reports to support governance forums and decision-making.

Qualifications & Work Experience

• A bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related discipline.
• 5-10 years of experience in cybersecurity governance, audit, risk management or compliance.
• Familiarity with cybersecurity frameworks such as NIST CSF, ISO/IEC 27001, and CIS Controls will be advantageous.
• Experience conducting risk assessments will be advantageous.
• Knowledge of regulatory requirements including the Cybersecurity Code of Practice (CCoP), Personal Data Protection Act (PDPA), and sector-specific standards will be advantageous.

Skills

Technical Skills include:

• Understanding of cybersecurity governance, risk and compliance principles.
• Ability to assess control effectiveness and identify gaps in policy implementation.
• Skilled in evidence gathering and report writing.
• Familiarity with GRC platforms and tools for tracking compliance and risk metrics.

Core Competencies include:

• Excellent analytical and documentation skills, with strong attention to detail.
• Effective communicator with the ability to engage stakeholders across technical and non-technical domains.
• High integrity and discretion in handling sensitive information.
• Proactive and collaborative mindset, with a commitment to continuous improvement