Security & Compliance Manager: MAS Regs & Audit Lead

Progression Search; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Progression Search seeks a Security & Compliance Manager to govern service provider security operations and the regulatory evidence pipeline within the Managed Services SOW. The role acts as the single point of accountability for translating security operations and compliance into a defensible operating rhythm.

The ideal candidate will bring 7–10 years in security/compliance, with CISSP/CISM/CISA, hands-on CyberArk, AD CS, Thales KMS/HSM, and Azure AD expertise.

Qualifications

• 7–10 years of relevant experience with a Bachelor’s degree in CS, IT, Engineering, or equivalent.
• CISSP, CISM, or CISA certification expected.
• Strong background in MAS TRM Guidelines and APAC regulatory/outsourcing frameworks with experience facilitating third‑party and regulator audits.
• Proven ability to manage stakeholders across Provider/Customer risk and audit functions.
• Demonstrated governance and security policy enforcement across complex environments.

Responsibilities

• Own delivery of the Compliance/Audit Tower, providing operational evidence for MAS TRM guidelines and regional frameworks.
• Administer CyberArk (PSM/CPM health, credential reconciliation, DR testing, quarterly recertification).
• Manage Microsoft Internal CA hierarchy and Thales KMS/HSM key lifecycles.
• Oversee Azure AD/Entra ID administration, conditional access, and identity governance.
• Chair monthly/quarterly Security and PKI/PAM Reviews and contribute to QBRs and DR readiness.

Skills

Regulatory governance

Stakeholder management

Policy enforcement

Audits

Education

Bachelor's degree in CS/IT/Engineering

CISSP / CISM / CISA

Tools

CyberArk

AD CS (Internal CA)

Thales KMS/HSM

Azure AD/Entra ID

Defender

SIEM

Tenable

Job description

Progression Search seeks a Security & Compliance Manager to govern service provider security operations and the regulatory evidence pipeline within the Managed Services SOW. The role acts as the single point of accountability for translating security operations and compliance into a defensible operating rhythm.

The ideal candidate will bring 7–10 years in security/compliance, with CISSP/CISM/CISA, hands-on CyberArk, AD CS, Thales KMS/HSM, and Azure AD expertise.