Manager, Digital & Technology (IT Security)

CapitaLand Group; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

CapitaLand Group is seeking a senior cybersecurity leader to own the architecture, security engineering and data protection roadmap across infrastructure, cloud, AI and applications.

You will drive security-by-design across initiatives, lead teams managing security platforms, and partner with multiple business units to strengthen cyber resilience and governance.

Qualifications

• Degree in Information Security, Computer Science, Information Technology or related discipline.
• Minimum 5 years of cybersecurity experience with at least 2 years in leadership.
• Strong knowledge of security architecture, cloud, data privacy and IAM/PAM.
• Familiarity with NIST CSF 2.0, CIS Controls and ISO 27001.

Responsibilities

• Lead cybersecurity architecture and technology roadmap aligned with business goals.
• Oversee cybersecurity platforms and enterprise security architecture.
• Apply security-by-design across infrastructure, cloud, data and apps.
• Drive secure SDLC, data protection, and vulnerability management.
• Collaborate with cross-functional teams to reduce cyber risk and improve resilience.
• Govern security standards, patterns, guidelines and reference architectures.

Skills

Security Architecture

Infrastructure & Endpoint Security

Cloud Security

Application Security & Secure SDLC

Data Security & Privacy

IAM/PAM

Security Platforms

AI Security

Education

Degree in Information Security or related discipline

Tools

SIEM

EDR

DLP

Email Security

Job description

This role is responsible for leading the organisation's cybersecurity architecture, security engineering, infrastructure security, endpoint security, application security and data protection functions. The incumbent will drive the cybersecurity technology roadmap, oversee the cybersecurity platform ecosystem, and ensure security-by-design principles are embedded across infrastructure, cloud, data, AI and application initiatives.

The role will work closely with infrastructure, cloud, network, application, data, OT and business teams to strengthen the organisation's cyber resilience, reduce cyber risk and enhance security capabilities through architecture governance, technology implementation and continuous improvement of cybersecurity controls.

In addition, the role will lead team responsible for managing cybersecurity platforms, application security, data protection and enterprise security architecture.

Responsibilities

• Lead the development and execution of the organisation's cybersecurity architecture and technology roadmap, ensuring alignment with business objectives and enterprise technology strategy.
• Establish and maintain cybersecurity architecture standards, security patterns, technical guidelines and reference architectures.
• Lead security architecture reviews for infrastructure, cloud, network, endpoint, application, data and digital transformation initiatives.
• Assess emerging technologies, cybersecurity threats and new business initiatives to identify security risks and recommend appropriate controls.
• Ensure security-by-design principles are incorporated throughout solution design, development and project delivery lifecycles.
• Oversee security controls across enterprise infrastructure, cloud environments, networks and endpoints.
• Lead the deployment, configuration, administration and optimisation of cybersecurity platforms across the enterprise.
• Drive the implementation and continuous improvement of endpoint protection, hardening standards, vulnerability management and privileged access controls.
• Lead the organisation's application security programme, including secure development practices, security assessments and remediation activities.
• Oversee data protection controls including data classification, encryption, key management, DLP and privacy requirements.
• Partner with development, data and business teams to embed security controls throughout the application and data lifecycle.

Requirements

• Degree in Information Security, Computer Science, Information Technology or a related discipline.
• 5 years of cybersecurity experience with at least 2 years in a leadership or managerial role.
• Strong knowledge of:
  • Security Architecture
  • Infrastructure & Endpoint Security
  • Cloud Security (Azure, Alibaba Cloud)
  • Application Security & Secure SDLC
  • Data Security & Privacy
  • IAM/PAM
  • Security Platforms (SIEM, EDR, DLP, Email Security, Vulnerability Management)
  • AI Security and API Security
• Familiarity with frameworks such as NIST CSF 2.0, CIS Controls, ISO 27001 and relevant regulatory requirements.
• Strong stakeholder management, project delivery and vendor management experience.