Manager, Digital & Technology (IT Security)

CLI Asset Management; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible medical coverage

Training & development

Ascott residence discounts

Volunteer programs

Wellness programmes

Job summary

CapitaLand Investment Limited (CLI) invites a skilled Manager, IT Security to drive cybersecurity governance, risk management, compliance, policy management and OT security across the Group. You will partner with business units, technology teams and external stakeholders to strengthen security controls and regulatory adherence.

You will lead GRC activities, develop and maintain security policies, conduct risk assessments and audits, oversee third‑party risk, and collaborate with regional teams

Qualifications

• Degree in Information Security, CS, IT or related discipline.
• 5–8 years in cybersecurity, GRC, or tech risk management.
• Strong knowledge of NIST CSF, ISO 27001, CIS Controls, PCI DSS and PDPA.
• Experience in governance, risk assessments, audits, policy development.
• Familiar with OT/IoT security and smart building tech is a plus.
• Professional certifications preferred: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer/Auditor.

Responsibilities

• Lead cybersecurity governance, risk and compliance (GRC) activities across the organization.
• Develop, maintain and enhance cybersecurity policies, standards, procedures and guidelines aligned with business and regulatory requirements.
• Lead security architecture reviews for infrastructure, cloud, network, endpoint, application, data and digital transformation initiatives.
• Drive compliance with PDPA, PCI DSS, ISO 27001, NIST CSF and other requirements.
• Manage cybersecurity risk assessments and maintain the enterprise cyber risk register, including tracking of risk mitigation plans.
• Coordinate internal and external audits, assessments and compliance reviews, and drive remediation of identified findings.
• Oversee third‑party cybersecurity risk assessments and work with vendors to address identified security gaps.
• Establish OT and IoT cybersecurity governance frameworks for smart building and OT environments.
• Conduct OT cybersecurity risk assessments and work with stakeholders to improve controls for OT systems.
• Partner with enterprise architecture, infrastructure and application teams to integrate cybersecurity requirements into initiatives.
• Manage and coordinate cybersecurity projects and initiatives as assigned.
• Collaborate with regional teams to drive consistent governance practices.

Skills

Governance & risk management

Cybersecurity frameworks

Stakeholder management

Policy development

Audits & risk assessments

Education

CISSP

CISM

CRISC

CISA

ISO 27001 Lead Implementer

Job description

About Us

Headquartered and listed in Singapore in 2021, CapitaLand Investment Limited (CLI) is a leading global real asset manager with a strong Asia foothold. As at 5 November 2025, CLI had S$120 billion of funds under management. CLI holds stakes in eight listed real estate investment trusts and a suite of private real asset vehicles that invest in demographics, disruption and digitalisation-theme strategies. Its diversified real asset classes include retail, office, lodging, industrial, logistics, business parks, wellness, self-storage, data centres and private credit.

Job Description

The Manager, IT Security is responsible for driving cybersecurity governance, risk management, compliance, policy management, OT security governance and security awareness initiatives across the Group. The role works closely with business, technology, property operations and external stakeholders to strengthen cybersecurity posture, manage cyber risks, support regulatory compliance and ensure effective implementation of security controls.

Responsibilities:

• Lead and manage cybersecurity governance, risk and compliance (GRC) activities across the organization.
• Develop, maintain and enhance cybersecurity policies, standards, procedures and guidelines aligned with business and regulatory requirements.
• Lead security architecture reviews for infrastructure, cloud, network, endpoint, application, data and digital transformation initiatives.
• Drive compliance with applicable regulations and frameworks such as PDPA, PCI DSS, ISO 27001, NIST Cybersecurity Framework and other relevant requirements.
• Manage cybersecurity risk assessments and maintain the enterprise cyber risk register, including tracking of risk mitigation plans.
• Coordinate internal and external audits, assessments and compliance reviews, and drive remediation of identified findings.
• Oversee third‑party cybersecurity risk assessments and work with vendors to address identified security gaps.
• Establish and maintain OT and IoT cybersecurity governance frameworks for smart building, property technology and operational technology environments.
• Conduct OT cybersecurity risk assessments and work with business stakeholders to improve security controls for OT systems.
• Partner with enterprise architecture, infrastructure and application teams to integrate cybersecurity requirements into technology initiatives.
• Manage and coordinate cybersecurity projects and initiatives as assigned.
• Collaborate with regional teams, including counterparts in China, to drive consistent cybersecurity governance practices

Requirements:

• Degree in Information Security, Computer Science, Information Technology or related discipline.
• Minimum 5-8 years of relevant experience in cybersecurity, information security, governance, risk and compliance, or technology risk management.
• Strong understanding of cybersecurity frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, PCI DSS and PDPA.
• Experience in cybersecurity governance, risk assessments, audit management and policy development.
• Knowledge of OT/IoT cybersecurity concepts, smart building technologies and industrial control environments would be advantageous.
• Experience managing cybersecurity initiatives across complex enterprise environments.
• Relevant professional certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer or Lead Auditor are preferred.
• Strong stakeholder management, communication and presentation skills.
• Experience working with multiple business units and regional stakeholders.
• Ability to work independently while effectively managing multiple priorities and deadlines.

Benefits

• Flexible benefits with comprehensive medical coverage for self and family
• Training and development opportunities
• Subsidised rates at Ascott serviced residences-
• Strong advocate of staff volunteerism
• Wellness programmes

Closing Statement:

At CapitaLand, we advocate fair employment practices, and recruit talents based on merit and fit with our Corporate values. We provide equal opportunity for all qualified persons and build an inclusive workplace regardless of race, gender, age, religious belief or nationality.

Only shortlisted candidates will be notified.