Manager - Cyber Risk Assessment & Governance (Cluster Office)

synapxe; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Synapxe is seeking a senior IT security professional to review risk assessments for ICT, OT and medical devices in line with risk management frameworks and IT security policies. You will provide security risk opinions, advisories and recommendations, and ensure consistent remediation prioritisation across the function.

The role also supports policy compliance, incident response activities and security awareness initiatives, with a focus on healthcare cybersecurity in regulated environments.

Qualifications

• At least 6–8 years of experience in IT, Information Security or IT Audit.
• At least 4 years of cybersecurity experience, preferably in healthcare or regulated sectors.
• Knowledge of ICT, OT and Medical Device cybersecurity.
• Experience spanning infrastructure and application security concepts.

Responsibilities

• Review risk assessments for ICT, OT and medical devices per policies and frameworks.
• Provide security risk opinions, advisories and remediation recommendations.
• Challenge and validate remediation priorities based on risk findings.
• Support policy compliance, incident management and security awareness initiatives.

Skills

IT Security

Risk Assessment

IT Audit

Policy Compliance

Education

CISSP

CCSP

CISA

CISM

CRISC

Job description

• Review risk assessments for ICT, OT, and medical devices in accordance with the Healthcare Cybersecurity & Technology Risk Management Framework and IT Security Policies.
• Provide security risk opinions, advisories, and recommendations.
• Challenge and validate security risk remediation priorities based on identified risk findings.
• Ensure consistency across risk recommendations, balancing operational efficiency with cybersecurity requirements.

Role & Responsibilities

Risk Assessment

• Review risk assessments for ICT, OT, and medical devices in accordance with the Healthcare Cybersecurity & Technology Risk Management Framework and IT Security Policies.
• Provide security risk opinions, advisories, and recommendations.
• Challenge and validate security risk remediation priorities based on identified risk findings.
• Ensure consistency across risk recommendations, balancing operational efficiency with cybersecurity requirements.

Policy Compliance

• Support security compliance program by assessing and validating adherence to policy requirements.
• Track all policy deviations and ensure timely renewal, implementation of mitigation plans, and eventual closure of each deviation.

Cybersecurity Incident Management

• Support the institution's incident response activities by assessing and classifying security incidents, initiating appropriate response actions, conducting impact assessments, containing and eradicating threats, coordinating recovery efforts, and performing post-incident investigations

Other Cybersecurity Activities

• Cybersecurity awareness initiatives, audit support, and security activities associated with key system migrations, including Windows migrations and system go-live events.

Requirements

• At least 6-8 years of experience in IT, Information Security, or IT Audit.
• At least 4 years of experience in cybersecurity, preferably in healthcare or other regulated industries.
• Knowledge of ICT, Operational Technology and Medical Device cybersecurity.
• Experience with Information and Cybersecurity concepts spanning infrastructure and application domains.
• Cybersecurity related certifications such as CISSP, CCSP, CISA, CISM, CRISC is preferred.