Manager - Risk Assessment & Compliance (Cluster CISO Office)

Synapxe; Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

Synapxe is seeking a cybersecurity risk professional to review risk assessments for ICT, OT, and medical devices and provide security risk opinions, advisories, and remediation recommendations. You will challenge remediation priorities and ensure consistency across recommendations, balancing operational needs with cybersecurity requirements.

Responsibilities also include supporting the policy compliance program, tracking deviations, and assisting with incident management activities and system

Qualifications

• Review risk assessments for ICT, OT, and medical devices in line with the Healthcare Cybersecurity & Technology Risk Management Framework.
• Provide security risk opinions, advisories, and recommendations to stakeholders.
• Challenge remediation priorities based on identified risk findings and ensure consistency across risk recommendations.

Responsibilities

• Review risk assessments for ICT, OT, and medical devices in accordance with the Healthcare Cybersecurity & Technology Risk Management Framework and IT Security Policies.
• Provide security risk opinions, advisories, and recommendations to stakeholders.
• Challenge and validate security risk remediation priorities based on identified risk findings.
• Ensure consistency across risk recommendations, balancing operational efficiency with cybersecurity requirements.

Skills

Risk assessment

Policy compliance

Incident management

Security advisories

Tools

Windows migrations

Job description

Risk Assessment

• Review risk assessments for ICT, OT, and medical devices in accordance with the Healthcare Cybersecurity & Technology Risk Management Framework and IT Security Policies.
• Provide security risk opinions, advisories, and recommendations.
• Challenge and validate security risk remediation priorities based on identified risk findings.
• Ensure consistency across risk recommendations, balancing operational efficiency with cybersecurity requirements.

Policy Compliance

• Support security compliance program by assessing and validating adherence to policy requirements.
• Track all policy deviations and ensure timely renewal, implementation of mitigation plans, and eventual closure of each deviation.

Cybersecurity Incident Management

• Support the institution’s incident response activities by assessing and classifying security incidents, initiating appropriate response actions, conducting impact assessments, containing and eradicating threats, coordinating recovery efforts, and performing post‑incident investigations

Other cybersecurity activities

• Cybersecurity awareness initiatives, audit support, and security activities associated with key system migrations, including Windows migrations and system go‑live events.