Security Manager

TESCOM (SINGAPORE) SOFTWARE SYSTEMS TESTING PTE LTD.; Singapore; In loco; SGD 180.000 - 280.000; Tempo pieno

Descrizione del lavoro

TESCOM (SINGAPORE) SOFTWARE SYSTEMS TESTING PTE LTD. seeks a Security Manager to lead cybersecurity governance, risk, compliance and operations across systems, apps, cloud, and infrastructure in line with government requirements.

The role serves as a trusted advisor to project stakeholders, auditors, and tech teams, driving a strong security posture through governance, risk mitigation, and continuous improvement initiatives. 8–10 years in cybersecurity with leadership is required.

Competenze

• Bachelor degree in cybersecurity or related discipline required.
• Demonstrated governance, risk management and compliance experience.
• Experience with security operations and assurance activities.
• Knowledge of ISO standards and regulatory requirements.
• Strong communication with technical and non-technical stakeholders.

Mansioni

• Implement and enhance cybersecurity governance frameworks and security requirements.
• Ensure regulatory, contractual, and security compliance across project lifecycles.
• Lead security accreditation activities including VA/PT and remediation.
• Oversee monitoring, incident response, vulnerability management and patch governance.
• Maintain security controls across the technology stack.
• Liaise with government agencies, auditors, vendors, and stakeholders.
• Mentor cybersecurity personnel and foster a high-performance security culture.

Conoscenze

Leadership

Governance

Risk management

Compliance

Security operations

Communication skills

Security architecture

Formazione

Bachelor Degree in Cybersecurity, Information Security, Computer Science or related discipline

Strumenti

SIEM

PAM

DAM

Firewalls

IDS/IPS

Cryptography

Descrizione del lavoro

The Security Manager is responsible for leading and overseeing cybersecurity governance, risk management, compliance, and operational security functions. This role ensures that systems, applications, cloud environments, and supporting infrastructure are designed, implemented, and operated in accordance with Government security requirements, regulatory obligations, and industry best practices.

The incumbent will serve as a trusted advisor to project stakeholders, auditors, and technology teams, driving a strong security posture through effective governance, risk mitigation, compliance assurance, and continuous security improvement initiatives.

Key Responsibilities

• Implement, maintain, and continuously enhance cybersecurity solutions, policies, standards, procedures, and governance frameworks and agency-specific security requirements.
• Ensure compliance with applicable regulatory, contractual, and security requirements throughout the project lifecycle
• Manage security accreditation activities including VA/PT, Security Assessment Reports and remediation.
• Oversee security monitoring, incident response, vulnerability management and patch governance.
• Ensure security controls are appropriately implemented and maintained throughout the technology stack.
• Act as primary cybersecurity liaison with Government agencies, auditors, vendors and project stakeholders.
• Lead, mentor, and develop cybersecurity personnel, fostering a high-performance security culture.

Qualifications and Experience

• Bachelor Degree in Cybersecurity, Information Security, Computer Science or related discipline
• Minimum 8 -10 years of cybersecurity experience with at least 5- 6 years in a leadership role
• Experience in Singapore public sector projects and Security Requirement
• Demonstrated experience in cybersecurity governance, risk management, compliance, security operations, and security assurance activities
• Good knowledge of ISO standards (ISO 9001, ISO/IEC 27001, ISO/IEC 12207)
• Knowledge of regulatory requirements and industry standards (e.g., NIST, ISO 27001, PCI-DSS, IM8, CSA CCOP)
• Solid understanding of security protocols, cryptography, and security standards
• Familiarity with security tools (e.g., SIEM, PAM, DAM, firewalls, intrusion detection systems) and operating systems (Linux, Windows, etc.)
• Experience in network security, including firewall management, VPNs, and IDS/IPS systems
• Experience with vulnerability scanning, penetration testing, and threat modeling
• Strong communication skills, with the ability to explain technical security concepts to non-technical stakeholders
• Professional certifications such as CISSP, CISM, CEH, CompTIA Security