Manager, Cybersecurity Assurance & Resilience

SMRT Corporation; Singapore; On-site; SGD 150,000 - 190,000; Full time

Job summary

SMRT Corporation is seeking a Manager, Cybersecurity Assurance & Resilience to join the GRC team in Singapore. You will oversee cybersecurity assurance, resilience, and third‑party risk management, ensuring controls are effective and compliant across systems and business functions.

You will lead evidence collection, audits and incident response tabletop exercises with a proactive, detail‑oriented approach. The role requires 5–10 years in cybersecurity governance, audits, compliance or risk

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related discipline.
• 5–10 years of experience in cybersecurity governance, audit, assurance, compliance, resilience or third‑party risk management.
• Familiarity with frameworks (NIST CSF, ISO/IEC 27001, CIS Controls)
• Experience managing vendor cybersecurity assessments and third‑party risk management programmes.
• Experience designing or facilitating cyber incident response exercises and table‑top exercises.
• Knowledge of regulatory requirements (CCoP, PDPA, sector standards)

Responsibilities

• Plan, manage and execute cybersecurity assurance activities to assess control effectiveness.
• Review against policies, standards, regulatory requirements and frameworks to identify gaps.
• Assess implementation and operating effectiveness of controls and propose corrective actions.
• Track remediation and monitor closure of findings.
• Support maturity assessments and benchmarking of cybersecurity capabilities.
• Coordinate evidence collection, validation and reporting for assurance reviews and audits.
• Support compliance activities to ensure adherence to policies and regulatory requirements.
• Monitor and report cybersecurity compliance posture across units and systems.
• Conduct compliance gap assessments and remediation planning.
• Assist internal and external audits, regulatory inspections and assessments.
• Manage and enhance Third-Party Risk Management programme and assessments.
• Monitor vendor cybersecurity posture and ratings to identify risks and remediation needs.
• Prepare assessment reports, risk findings and recommendations for management decisions.
• Develop and facilitate table-top exercises, cyber crisis simulations and incident response exercises.
• Document exercise outcomes and lessons learned for improvements.
• Support initiatives to strengthen organisational cyber resilience and recovery capabilities.

Skills

Cybersecurity governance

Audit & assurance

Compliance and regulatory

Vendor risk management

Incident response exercises

Metrics and reporting

Education

Bachelor’s degree in Cybersecurity/Info Sec/CS

Job description

In today’s rapidly evolving threat landscape, cybersecurity governance is essential to maintaining operational integrity and regulatory compliance. SMRT is seeking a detail-oriented and proactive Manager, Cybersecurity Assurance & Resilience to join our Governance, Risk and Compliance (GRC) team. This role is responsible for ensuring the effectiveness of SMRT’s cybersecurity assurance, resilience and third-party risk management programmes through the assessment of cybersecurity controls, oversight of compliance requirements, management of third-party cyber risks, and validation of organisational readiness to respond to and recover from cybersecurity incidents.

Job description

Job Purpose

In today’s rapidly evolving threat landscape, cybersecurity governance is essential to maintaining operational integrity and regulatory compliance. SMRT is seeking a detail-oriented and proactive Manager, Cybersecurity Assurance & Resilience to join our Governance, Risk and Compliance (GRC) team. This role is responsible for ensuring the effectiveness of SMRT’s cybersecurity assurance, resilience and third-party risk management programmes through the assessment of cybersecurity controls, oversight of compliance requirements, management of third-party cyber risks, and validation of organisational readiness to respond to and recover from cybersecurity incidents.

Responsibilities

• Cybersecurity Assurance
  • Plan, manage and execute cybersecurity assurance activities to assess the effectiveness of cybersecurity controls across systems, processes and business functions.
  • Conduct reviews against cybersecurity policies, standards, regulatory requirements and industry frameworks to identify control gaps and improvement opportunities.
  • Assess the implementation and operating effectiveness of cybersecurity controls and recommend corrective actions where necessary.
  • Track remediation efforts and monitor the closure of identified findings and weaknesses.
  • Support cybersecurity maturity assessments and benchmarking exercises to evaluate organisational cybersecurity capabilities.
  • Coordinate evidence collection, validation and reporting for cybersecurity assurance reviews and audits.
• Cybersecurity Compliance Support
  • Support cybersecurity compliance activities to ensure adherence to internal policies, standards, regulatory requirements and organisational obligations.
  • Assist in monitoring and reporting cybersecurity compliance posture across business units and systems.
  • Conduct compliance gap assessments and support remediation planning activities.
  • Support internal and external audit engagements, regulatory inspections and compliance assessments.
• Third-Party Cyber Risk Management & Security Rating Monitoring
  • Manage and continuously enhance the Cybersecurity Third-Party Risk Management (TPRM) programme and associated assessment processes.
  • Perform cybersecurity due diligence assessments for vendors, suppliers and service providers.
  • Monitor vendor’s cybersecurity posture and security ratings to identify emerging risks and ensure timely remediation of identified issues.
  • Prepare assessment repots, risk findings and recommendations to support management decision-making, procurement evaluation and governance reviews.
• Cybersecurity Resilience & Table-Top Exercises
  • Develop, coordinate and facilitate cybersecurity table-top exercises, cyber crisis simulations and incident response exercises.
  • Design realistic cyberattack scenarios to validate incident response, crisis management and decision-making processes.
  • Document exercise outcomes, lessons learnt and recommendations for improvement.
  • Support initiatives to strengthen organisational cyber resilience, operational readiness recovery capabilities.

Qualifications & Work Experience

• A bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related discipline.
• 5–10 years of experience in cybersecurity governance, audit, assurance, compliance, resilience or third-party risk management.
• Familiarity with cybersecurity frameworks such as NIST CSF, ISO/IEC 27001, and CIS Controls will be advantageous.
• Experience managing vendor cybersecurity assessments and third-party risk management programmes will be advantageous.
• Experience designing or facilitating cyber incident response exercises and table‑top exercises will be advantageous.
• Knowledge of regulatory requirements including the Cybersecurity Code of Practice (CCoP), Personal Data Protection Act (PDPA), and sector‑specific standards will be advantageous.

Skills

Technical Skills

• Understanding of cybersecurity governance, assurance and compliance principles.
• Ability to assess control effectiveness and identify gaps in policy implementation.
• Skilled in evidence gathering and report writing.
• Familiarity with third-party risk management methodologies and vendor security assessment practices.
• Ability to develop meaningful cybersecurity metrics, reports and dashboards.

Core Competencies

• Excellent analytical and documentation skills, with strong attention to detail.
• Effective communicator with the ability to engage stakeholders across technical and non-technical domains.
• High integrity and discretion in handling sensitive information.
• Proactive and collaborative mindset, with a commitment to continuous improvement