Manager, Cybersecurity Assurance & Resilience

SMRT Corporation Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SMRT Corporation Ltd is seeking a Manager, Cybersecurity Assurance & Resilience to support governance, risk and compliance with a focus on assurance, resilience and third-party risk management.

You will oversee cybersecurity assurance activities, conduct gap analyses, coordinate audits, and work with internal teams to strengthen cyber resilience through tabletop exercises and incident response simulations.

Qualifications

• Experience in cybersecurity assurance and governance.
• Knowledge of regulatory requirements and industry frameworks.

Responsibilities

• Plan, manage and execute cybersecurity assurance activities across systems and processes.
• Conduct reviews against policies, standards, and regulatory requirements to identify gaps.
• Assess implementation and operating effectiveness of controls and propose corrective actions.
• Track remediation and monitor closure of findings and weaknesses.
• Support maturity assessments and benchmarking of cybersecurity capabilities.
• Coordinate evidence collection, validation and reporting for assurance reviews and audits.
• Support cybersecurity compliance activities and monitor posture across units.
• Conduct compliance gap assessments and assist remediation planning.
• Support audits, regulatory inspections and compliance assessments.
• Manage third-party risk management programmes and due diligence for vendors and service providers.
• Monitor vendor cybersecurity posture and ratings to identify risks and remediation needs.
• Prepare assessment reports and recommendations for governance and procurement.

Skills

Cybersecurity

Risk management

Compliance

Vendor risk

Job description

As Manager, Cybersecurity Assurance & Resilience, you will support Head, Governance, Risk & Compliance in ensuring the effectiveness of SMRT’s cybersecurity assurance, resilience and third-party risk management programmes. Your responsibilities include:

Cybersecurity Assurance

• Plan, manage and execute cybersecurity assurance activities to assess the effectiveness of cybersecurity controls across systems, processes and business functions.
• Conduct reviews against cybersecurity policies, standards, regulatory requirements and industry frameworks to identify control gaps and improvement opportunities.
• Assess the implementation and operating effectiveness of cybersecurity controls and recommend corrective actions where necessary.
• Track remediation efforts and monitor the closure of identified findings and weaknesses.
• Support cybersecurity maturity assessments and benchmarking exercises to evaluate organisational cybersecurity capabilities.
• Coordinate evidence collection, validation and reporting for cybersecurity assurance reviews and audits.

Cybersecurity Compliance Support

• Support cybersecurity compliance activities to ensure adherence to internal policies, standards, regulatory requirements and organisational obligations.
• Assist in monitoring and reporting cybersecurity compliance posture across business units and systems.
• Conduct compliance gap assessments and support remediation planning activities.
• Support internal and external audit engagements, regulatory inspections and compliance assessments.

Third-Party Cyber Risk Management & Security Rating Monitoring

• Manage and continuously enhance the Cybersecurity Third-Party Risk Management (TPRM) programme and associated assessment processes.
• Perform cybersecurity due diligence assessments for vendors, suppliers and service providers.
• Monitor vendor’s cybersecurity posture and security ratings to identify emerging risks and ensure timely remediation of identified issues.
• Prepare assessment repots, risk findings and recommendations to support management decision‑making, procurement evaluation and governance reviews.

Cybersecurity Resilience & Table-Top Exercises

• Develop, coordinate and facilitate cybersecurity table-top exercises, cyber crisis simulations and incident response exercises.
• Design realistic cyberattack scenarios to validate incident response, crisis management and decision‑making processes.
• Document exercise outcomes, lessons learnt and recommendations for improvement.
• Support initiatives to strengthen organisational cyber resilience, operational readiness recovery capabilities.