Senior Information Security Manager

Screening Eagle Technologies; Singapore; On-site; SGD 100,000 - 150,000; Full time

Job summary

A tech-focused company in Singapore is seeking a Senior Information Security Manager to lead its overall information security strategy and operations. The role demands over 7 years of experience in information security management, including significant experience with ISO 27001 and SOC 2 audits. The successful candidate will provide strategic recommendations, balance leadership with hands-on execution, and ensure compliance with regulations. Excellent communication and stakeholder management skills are essential.

Qualifications

• 7+ years of experience in information security management, with at least 3 years in a leadership capacity.
• Proven experience managing ISO 27001 and SOC 2 audits/accreditations.
• Familiar with China’s cybersecurity and data protection regulations preferred.
• Relevant certifications such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor preferred.
• Relevant certifications such as CISSP or CISM preferred.

Responsibilities

• Oversee and manage day-to-day information security operations and compliance activities.
• Lead the annual ISO 27001 audit process, ensuring continuous compliance and successful recertification.
• Manage and coordinate the company’s SOC 2 accreditation process, including documentation and audit readiness.
• Conduct regular risk assessments, vulnerability scans, and incident response activities.
• Conduct regular risk assessments and vulnerability scans.

Skills

Information Security Management

Stakeholder Management

Risk Management

Incident Response

Security Frameworks (NIST, CIS)

Project Leadership

Education

Bachelor’s degree in Information Security, Computer Science, or related field

Tools

ISO 27001

SOC 2

Job description

Intro

The Senior Information Security Manager is responsible for leading and managing the organization’s overall information security strategy, operations, and compliance initiatives. This role requires both strategic planning and hands‑on execution to ensure the company’s data, systems, and infrastructure are protected against evolving security threats. What will you do

• Oversee and manage day‑to‑day information security operations and compliance activities.
• Lead the annual ISO 27001 audit process, ensuring continuous compliance and successful recertification.
• Manage and coordinate the company’s SOC 2 accreditation process, including documentation, control validation, and audit readiness.
• Oversee and execute the annual security accreditation process in China, ensuring alignment with local regulatory requirements and internal standards.
• Develop, implement, and maintain security policies, standards, and procedures.
• Partner with internal teams to assess security risks and ensure secure system design and configuration.
• Drive security awareness and training programs across the organization.
• Conduct regular risk assessments, vulnerability scans, and incident response activities.
• Work closely with IT, engineering, and compliance teams to ensure security is embedded in business processes and products.
• Provide strategic security recommendations to leadership and drive initiatives that strengthen the company’s security posture.
• Balance strategic leadership and hands‑on execution, ensuring both tactical issues and long‑term improvements are effectively managed.

What do we expect

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 7+ years of experience in information security management, with at least 3 years in a leadership capacity.
• Proven experience managing ISO 27001 and SOC 2 audits / accreditations.
• Familiar with China’s cybersecurity and data protection regulations preferred.
• Strong understanding of risk management, security frameworks (e.g., NIST, CIS), and incident response processes.
• Relevant certifications such as CISSP, CISM, or ISO 27001 Lead Implementer / Auditor preferred.
• Excellent communication, stakeholder management, and project leadership skills.