Manager, Cyber Security

CIGNA EUROPE INSURANCE COMPANY S.A.-N.V. Singapore Branch; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Cigna is seeking a Manager, Cyber Security - APAC to lead security operations and risk management for the Asia Pacific region. You will collaborate with GIS APAC to enforce controls across infrastructure, applications, and third parties, and support vulnerability assessments and incident coordination.

The role involves dashboard reporting, regulatory reviews, and driving remediation across multiple technology platforms while staying current with evolving threats.

Qualifications

• Bachelor's degree in Technology, Computer Science or related subjects preferred.
• Strong understanding of security frameworks, standards, and best practices (e.g. NIST CS).

Responsibilities

• Perform issue tracking and resolution with local technology and business teams.
• Collaborate with local and International Business Continuity Management to ensure compliant BCP/DR controls.
• Work with GIS APAC team to manage security incidents for the APAC region.
• Assist in reviewing and approving security changes for applications/infrastructure.
• Produce accurate security reports with remediation recommendations.
• Support regulatory reviews and assess compliance with local notices.
• Help implement standard security solutions aligned with business and threat drivers.
• Maintain strong relationships across teams managing information risk.

Skills

Independent worker

Team player

Cyber security risk

Stakeholder coordination

Windows OS

Unix/Linux OS

Internet protocols

Encryption basics

Cloud environments

OWASP

Networking fundamentals

Vulnerability analysis

Education

Bachelor's degree in Tech/CS

Tools

Firewalls

VPNs

IDS

Antivirus

Vulnerability scanning

Job description

Job Description Summary Advanced level professional providing professional input to complex Cyber Security assignments/projects and providing direction to more junior professionals; works autonomously, only requiring \"expert\" level technical support from others; exercises judgment in the evaluation, selection, and adaptation of both standard and complex techniques and procedures with Information Security; uses in-depth professional knowledge and acumen to develop models and procedures, and monitor trends, within own discipline area. This position is responsible for configuration, testing, and management of an organization's information security architecture. The position works as a team member on problems of moderate scope, complexity, or diversity. The position may lead small projects and typically works on assignments of small to moderate scope in multiple technology platforms/business areas. Responsibilities may include policy development, installation, configuration, testing and maintenance of network and security products such as firewalls, virtual private networks, intrusion detection systems, anti-virus software, vulnerability scanning systems, routers, and switches.

Manager, Cyber Security - APAC

The Manager, Cyber Security is responsible for providing general technical, operational and risk management support to Global Information Security (GIS) Asia Pacific (APAC) team. This role will support in enforcing standard information protection controls through infrastructure, application and third-party security assessments. Work with the Enterprise Global Information Security team as required to support vulnerability assessments, assisting with penetration tests, tracking and remediation of findings.

This role will work closely with the GIS APAC team to identify, evaluate, and remediate potential weaknesses in Cigna's systems, using both manual and automated methods. In addition, this role will support the dashboard reporting, coordination of incident responses, risk assessments and other GIS led initiatives & shared services.

About Cigna:

Cigna is a global health service company dedicated to helping the people we serve improve their health, well-being, and peace of mind. But we don't just care about your well-being, we care about your career health too. That's why, when you work with us, you can count on a different kind of career - you'll make a difference, learn a ton, and share in changing the way people think about healthcare.

Job Description & Responsibilities:

• Perform issue tracking and resolution with local technology and business teams
• Collaborate with local and International Business Continuity Management team to ensure local BCP/DR controls are compliant with GIS policies & standards and regulatory requirements.
• Work with GIS APAC team and key stakeholders to managing security incidents relevant to the APAC region
• Assist in the review and approval of application/infrastructure changes in terms of security
• Assist in producing accurate security reports with remediation recommendations and communicating risks to technology teams.
• Assist in performing local regulatory reviews/assessments and evaluate compliance of requirements from the local security regulatory notices.
• Assist GIS and technology teams to implement standard security solutions and capabilities that are aligned with business, technology and threat drivers
• Maintain strong working relationships with individuals and groups involved in managing information risks across the organization
• Stay abreast of current and emerging security threats and security architectures to mitigate the threats
• Collaborate with GIS shared services to ensure timely and effective service delivery to the APAC region.
• Monitor progress of staff awareness of phishing tests and awareness training.

Skills required:

• Demonstrated ability to work as both an individual contributor and a team player in a fast paced environment.
• Demonstrated ability to identify cyber security risks and develop treatment plans working with key stakeholders
• Coordinate with people and teams to forecast activity completion and the ability to work in a team environment, sharing workloads and responsibilities.
• Knowledge of Windows and *nix-based operating systems.
• Understanding of core Internet protocols (e.g. TCP, UDP, DNS, TLS, IPsec) and the OSI model.
• Understanding of encryption fundamentals (symmetric/asymmetric, ECB/CBC operations, AES, etc.).
• Understanding of Cloud environments such as SaaS, PaaS and IaaS.
• Understanding of OWASP.
• Knowledge of networking fundamentals and common attacks.
• Ability to analyze vulnerabilities and misconfigurations, appropriately characterize threats, and provide remediation recommendations.

Qualifications:

• Bachelor's degree in Technology, Computer Science or related subjects preferred.
• Strong understanding of security frameworks, standards, and best practices (e.g. NIST CS