Manager, Risk Management

SMRT Corporation, Ltd.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

SMRT Corporation Ltd is seeking a Manager, Risk Management to lead OT cybersecurity and risk governance across the organisation in Singapore. You will ensure adherence to CSA and CP8 standards, oversee risk assessment programs, audits and vulnerability assessments, and support cybersecurity training to strengthen awareness and culture.

The role requires a degree in engineering or CS and 7–8 years of relevant experience, with preferred certifications such as CISM, CISSP, CEH or CISA.

Qualifications

• Degree in Electrical & Electronics Engineering, Computer Science or equivalent.
• 7 to 8 years of working experience in the engineering field.
• Cybersecurity-related qualifications and/or certifications such as CISM, CISSP, CEH or CISA are preferred.

Responsibilities

• Ensure the organisation’s compliance with security standards and guidelines (CSA, CP8, CSIMF).
• Oversee cybersecurity risk management and monitor follow-up actions until completion.

Skills

Cybersecurity leadership

Regulatory compliance

Risk assessment

Strategic planning

Communication

Education

Bachelor's degree in Electrical & Electronics Engineering, Computer Science or equivalent

Tools

VMware

Job description

Select how often (in days) to receive an alert:

Job Purpose

To deliver Operational Technology (OT) cybersecurity and cyber resilience in SMRT, strong oversight of cybersecurity risk and compliance with both regulatory and in-house requirements is critical.

To achieve the above, the Manager, Risk Management is to ensure the organisation's adherence to cybersecurity regulations, policies and standards, oversee the conduct of cybersecurity risk management, including risk control measures, monitor follow-up measures until completion, and implement strategies to enhance the organisation's overall security posture. He/she will also provide support for cybersecurity training and competency to build a strong awareness, ownership and culture.

Responsibilities

1. Ensure the organisation’s compliance with the security standards and guidelines stipulated in:

• CSA Cybersecurity Act
• CSA Cybersecurity Code of Practice for Critical Information Infrastructure (CCoP)
• Relevant CSA’s Guide e.g., Guide to Conducting Cybersecurity Risk Assessment for Critical Information Infrastructure
• LTA Code of Practice for Cyber Security in MRT Systems (CP8), including Land Transport Cyber Security Incident Management Framework (CSIMF)
• CSA publications such as Security-by-Design Framework, etc.

2. Oversee the conduct of cybersecurity risk management, including risk control measures, monitor follow-up actions to mitigate the identified risks until completion and provide regular updates to Management.

3. Manage contracts and deliverables for regulatory CCoP and CP8 audits (2-yearly), Risk Assessment (annually), Vulnerability Assessment (2-yearly) for CII and other contracts as required, and support the conduct of these activities, where required. Note: CP8 includes important non-CII system.

4. Manage processes such as waiver request submissions and reviews, and monitor follow-up actions arising from audits, Risk Assessment and Vulnerability Assessment.

5. Support Policy & Governance team in developing and implementing policies, standards and/or guidelines for managing cybersecurity risks and protecting OT systems against cybersecurity threats.

6. Gatekeep submissions of Material Change Form and corresponding CII Information Record (S10) Form within the specified timeline.

7. Report on the status of OT Cybersecurity status for submission tor Authority and/or Management.

8. Support for cybersecurity training and competency development programme to build up strong cybersecurity awareness, ownership and culture in SMRT.

9. Support the conduct of Cybersecurity Management meetings.

10. Provide guidance to the OT Cybersecurity Operations team in managing CII and Non-CII Asset Information & Security baselines, Identity Management, Authentication and Access Control Technical security solutions to ensure the security and resilience of systems and assets, consistent with related policies, procedures, and agreements.

11. Collaborate with the SMRT Risk Management, Internal Audit and Legal Teams on risk and compliance matters.

12. Where required, support the conduct of validation checks to ensure that security control measures are maintained.

13. Where required, support the conduct of cybersecurity exercises such as Table-Top Exercise for CII.

Qualifications & Work Experience

• Degree in Electrical & Electronics Engineering, Computer Science or equivalent.
• At least 7 to 8 years of working experience in the engineering field.
• Cybersecurity-related qualifications and/or certifications such as CISM, CISSP, CEH or CISA are preferred.

Skills

Technical skills include:

• Good knowledge of cybersecurity regulations, principles, standards and processes.
• Good knowledge of cybersecurity risk assessment and vulnerability assessment.
• Strategising, Planning and Organising skills.
• Knowledge of virtualisation with VMware is preferred.

Generic skills include:

• Leadership
• Initiative-taking and adaptable
• Effective communication
• Teamwork
• Critical thinking and problem-solving skills
• Ability to work under pressure

SMRT Trains Ltd was incorporated in 1987 and operates Singapore’s first mass rapid transit system. Today, we manage and operate train services on the North-South Line, East-West Line, the Circle Line, the Thomson-East Coast Line, and the Bukit Panjang Light Rail Transit. With over 5,000 employees, more than 250 trains, and 141 km of rail tracks across 108 stations, we serve millions of commuters daily.

About SMRT Corporation

SMRT Corporation Ltd (SMRT) is a public transport services provider. Our primary business is to manage and operate train services on the North-South Line, theEast-West Line, the Circle Line, the new Thomson East-Coast Line and the Bukit Panjang Light Rail Transit. This is complemented by our bus, taxi and private hire vehicle services.

An exciting and rewarding career is waiting for you at SMRT. Join us and embark on a journey that matters. You Matter – we take care of you and your well-being. Your Work Matters – your ideas and contributions work towards building the future of our transport system and create positive impacts to the community. Your Development Matters – we offer diverse careers and learning opportunities for our people to grow you to the fullest of your potential.

Come onboard the SMRT journey today.

Vision
Moving People. Enhancing Lifestyles

Core Values
Respect, Integrity, Safety & Service, Excellence