Manager, Compliance

SMRT Corporation Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SMRT Corporation Ltd in Singapore is seeking a Manager, Compliance to support the Head of Governance, Risk & Compliance in developing and implementing a robust cybersecurity governance, risk and compliance framework and strengthening organisational resilience.

You will lead cybersecurity compliance activities, awareness training, and reporting to senior management, ensuring consistent cybersecurity requirements across units and driving a risk-aware culture across the organisation.

Responsibilities

• Manage, plan and execute cybersecurity compliance activities to assess control effectiveness, identify compliance gaps and remediation actions.
• Monitor, assess and report cybersecurity maturity levels, aligning with industry standards and regulatory expectations.
• Manage and coordinate internal cybersecurity compliance activities, ensuring consistent application across business units and systems.
• Investigate cybersecurity code of conduct violations or control weaknesses and coordinate root-cause analysis and corrective actions.
• Design and deliver cybersecurity awareness initiatives and training programmes to strengthen organisational cyber resilience.
• Promote accountability, risk ownership and cybersecurity-first thinking throughout the organisation.
• Collaborate with stakeholders, business units and senior management to communicate cybersecurity posture and risk exposure.
• Prepare dashboards, metrics and reports to support governance forums and decision-making.

Job description

As Manager, Compliance, you will support Head, Governance, Risk & Compliance in managing, developing and implementing a robust cybersecurity governance, risk and compliance framework and strengthening organisational resilience. Your responsibilities include:

Cybersecurity Compliance

• Manage, plan and execute cybersecurity compliance activities to assess control effectiveness, identify compliance gaps and recommend remediation actions.
• Monitor, assess and report cybersecurity maturity levels, ensuring progressive alignment with industry standards and regulatory expectations.
• Manage and coordinate internal cybersecurity compliance activities, ensuring consistent application of cybersecurity requirements across business units and systems.
• Investigate identified cybersecurity code of conduct violations or control weaknesses, and work with stakeholders to determine root causes and corrective measures.

Cybersecurity Awareness & Training

• Drive the design and delivery of cybersecurity awareness initiatives and training programmes to strengthen organisational cyber resilience.
• Promote a culture of accountability, risk ownership and cybersecurity-first thinking throughout the organisation.

Stakeholder Engagement & Reporting

• Work closely with stakeholders, business units and senior management to communicate group cybersecurity posture and risk exposure.
• Prepare dashboards, metrics and reports to support governance forums and decision-making.