Manager, Digital & Technology (IT Security)

CapitaLand; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible medical coverage

Training and development opportunities

Ascott residences discounts

Staff volunteerism support

Wellness programmes

Job summary

CapitaLand is hiring a Manager, IT Security to drive cybersecurity governance, risk, compliance and policy across the group. You will lead architecture reviews for infrastructure, cloud and OT/IoT, ensuring PDPA, PCI DSS, ISO 27001 and NIST CSF alignment.

Engage stakeholders, coordinate audits and drive risk remediation across regional teams. The role requires strong security program leadership, vendor risk oversight and cross-functional collaboration with business units and property operations.

Qualifications

• Degree in Information Security, Computer Science, Information Technology or related discipline.
• Minimum 5-8 years of relevant cybersecurity, governance, risk and compliance experience.
• Familiarity with NIST CSF, ISO 27001, CIS Controls, PCI DSS and PDPA.
• Experience in governance, risk assessments, audits and policy development.
• OT/IoT cybersecurity concepts and smart building tech knowledge is advantageous.

Responsibilities

• Lead cybersecurity governance, risk and compliance (GRC) activities across the organization.
• Develop and maintain cybersecurity policies, standards, procedures and guidelines.
• Lead security architecture reviews for infrastructure, cloud, network, endpoints, apps and data.
• Drive compliance with PDPA, PCI DSS, ISO 27001, NIST CSF and related frameworks.
• Manage enterprise cyber risk register and remediation plans.
• Coordinate audits, assessments and remediation with internal and external teams.
• Oversee third-party cybersecurity risk assessments and vendor remediation.
• Establish OT and IoT cybersecurity governance for smart buildings and operational tech.
• Collaborate with EA, infrastructure and applications teams to embed security requirements.
• Manage cybersecurity projects and coordinate across regional teams.

Skills

GRC Management

Policy Development

Regulatory Compliance

Cybersecurity Frameworks

OT/IoT Security

Stakeholder Engagement

Audits & Remediation

Cloud/Security Architecture

Education

Information Security Degree

Job description

**About Us**Headquartered and listed in Singapore in 2021, CapitaLand Investment Limited (CLI) is a leading global real asset manager with a strong Asia foothold. As at 5 November 2025, CLI had S$120 billion of funds under management. CLI holds stakes in eight listed real estate investment trusts and a suite of private real asset vehicles that invest in demographics, disruption and digitalisation-theme strategies. Its diversified real asset classes include retail, office, lodging, industrial, logistics, business parks, wellness, self-storage, data centres and private credit.**Job Description**The Manager, IT Security is responsible for driving cybersecurity governance, risk management, compliance, policy management, OT security governance and security awareness initiatives across the Group. The role works closely with business, technology, property operations and external stakeholders to strengthen cybersecurity posture, manage cyber risks, support regulatory compliance and ensure effective implementation of security controls. **Responsibilities:*** Lead and manage cybersecurity governance, risk and compliance (GRC) activities across the organization.* Develop, maintain and enhance cybersecurity policies, standards, procedures and guidelines aligned with business and regulatory requirements.* Lead security architecture reviews for infrastructure, cloud, network, endpoint, application, data and digital transformation initiatives.* Drive compliance with applicable regulations and frameworks such as PDPA, PCI DSS, ISO 27001, NIST Cybersecurity Framework and other relevant requirements.* Manage cybersecurity risk assessments and maintain the enterprise cyber risk register, including tracking of risk mitigation plans.* Coordinate internal and external audits, assessments and compliance reviews, and drive remediation of identified findings.* Oversee third-party cybersecurity risk assessments and work with vendors to address identified security gaps.* Establish and maintain OT and IoT cybersecurity governance frameworks for smart building, property technology and operational technology environments.* Conduct OT cybersecurity risk assessments and work with business stakeholders to improve security controls for OT systems.* Partner with enterprise architecture, infrastructure and application teams to integrate cybersecurity requirements into technology initiatives.* Manage and coordinate cybersecurity projects and initiatives as assigned.* Collaborate with regional teams, including counterparts in China, to drive consistent cybersecurity governance practices **Requirements:*** Degree in Information Security, Computer Science, Information Technology or related discipline.* Minimum 5-8 years of relevant experience in cybersecurity, information security, governance, risk and compliance, or technology risk management.* Strong understanding of cybersecurity frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, PCI DSS and PDPA.* Experience in cybersecurity governance, risk assessments, audit management and policy development.* Knowledge of OT/IoT cybersecurity concepts, smart building technologies and industrial control environments would be advantageous.* Experience managing cybersecurity initiatives across complex enterprise environments.* Relevant professional certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer or Lead Auditor are preferred.* Strong stakeholder management, communication and presentation skills.* Experience working with multiple business units and regional stakeholders.* Ability to work independently while effectively managing multiple priorities and deadlines.**Benefits** * Flexible benefits with comprehensive medical coverage for self and family* Training and development opportunities* Subsidised rates at Ascott serviced residences-* Strong advocate of staff volunteerism* Wellness programmes**Closing Statement:**At CapitaLand, we advocate fair employment practices, and recruit talents based on merit and fit with our Corporate values. We provide equal opportunity for all qualified persons and build an inclusive workplace regardless of race, gender, age, religious belief or nationality.Only shortlisted candidates will be notified.