Manager, CyberSecurity (Operations)

SMRT CORPORATION LTD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SMRT Trains Ltd is seeking a Cybersecurity Operations Manager to lead and strengthen our security operations. You will protect enterprise systems and data through monitoring, incident response, and vulnerability management, collaborating with IT, cloud, and business teams.

Responsibilities include managing security tools, supporting audits, and driving continuous security improvements to ensure governance and robust risk management across our networks and platforms.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field.
• 5–8 years in cybersecurity or IT security operations.
• Experience in SOC operations and incident response.
• Certifications preferred: CISSP, CISM, CEH.

Responsibilities

• Oversee day-to-day cybersecurity operations.
• Lead security monitoring and threat detection activities.
• Coordinate incident response with internal teams and external vendors.
• Manage and optimise security tools (SIEM, EDR/XDR, email security, firewalls, IDS/IPS, vulnerability scanners, IAM).
• Ensure compliance with ISO 27001, NIST, CIS, PDPA and related standards.
• Maintain cybersecurity procedures, standards, and documentation.

Skills

Cybersecurity operations

Incident response

Threat hunting

Cloud security

Security analytics

SIEM

EDR/XDR

Vulnerability management

IAM

Microsoft Defender

KQL

Stakeholder management

Education

Bachelor's degree in Cybersecurity

Tools

SIEM tools

EDR/XDR tools

Vulnerability scanners

IAM tools

Job description

We are seeking a highly skilled and hands‑on Cybersecurity Operations Manager to lead and strengthen our organisation's cybersecurity operations. This role is responsible for safeguarding the confidentiality, integrity, and availability of enterprise systems and data through effective security monitoring, incident response, and vulnerability management.

The Cybersecurity Operations Manager will oversee the management of security tools and platforms, support compliance requirements, and drive continuous improvement of cybersecurity capabilities. This role requires close collaboration with IT infrastructure, cloud, application, and business teams to enhance the organisation's overall security posture and ensure robust operational governance

Responsibilities

• Manage day‑to‑day cybersecurity operations.
• Oversee security monitoring and threat detection activities.
• Ensure continuous monitoring of alerts, events, and incidents.
• Maintain cybersecurity procedures, standards, and documentation.
• Coordinate incident response with internal teams and external vendors.
• Conduct root cause analysis and prepare post‑incident reports.
• Manage threat intelligence and proactive threat hunting.
• Oversee vulnerability assessments and remediation efforts.
• Ensure timely patching and security hardening across systems and networks.
• Track and report cybersecurity risks and remediation progress.
• Drive exposure reduction and security posture improvements.
• Manage and optimise security tools (SIEM, EDR/XDR, email security, firewalls, IDS/IPS, vulnerability scanners, IAM).
• Ensure proper integration and performance of security platforms.
• Support compliance with ISO 27001, NIST, CIS, PDPA, and related standards.
• Ensure security controls are implemented and effective.
• Assist with audits and evidence collection.
• Maintain operational metrics and KRI reporting.
• Provide regular reports on security operations and risks to management.
• Communicate incidents, risks, and remediation status clearly.
• Collaborate with infrastructure, cloud, application, and business teams.
• Drive continuous improvement of cybersecurity capabilities.

Qualifications & Work Experience

• Bachelor's degree in Cybersecurity, IT, Computer Science, or related field.
• 5-8 years of experience in cybersecurity or IT security operations.
• Experience in SOC operations and incident response.
• Exposure to cloud security (Azure, AWS, or GCP) preferred.
• Strong knowledge of security operations, incident response, vulnerability, endpoint, network, IAM, and cloud security.
• Hands‑on experience with Microsoft Defender, SIEM, EDR/XDR, and vulnerability management tools.
• Familiarity with KQL, threat hunting, and security analytics is a plus.
• Strong analytical and problem‑solving skills.
• Effective communication and stakeholder management skills.
• Proven crisis and incident management capability.
• Ability to work under pressure and manage multiple priorities.
• Continuous improvement mindset.
• Relevant certifications (preferred): CISSP, CISM, CEH, Microsoft, ISO 27001.

SMRT Trains Ltd was incorporated in 1987 and operates Singapore's first mass rapid transit system. Today, we manage and operate train services on the North-South Line, East-West Line, the Circle Line, the Thomson-East Coast Line, and the Bukit Panjang Light Rail Transit. With over 5,000 employees, more than 250 trains, and 141 km of rail tracks across 108 stations, we serve millions of commuters daily.