Senior Manager, Cybersecurity & Assurance

Changi Airport Group; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Changi Airport Group seeks a senior cybersecurity lead to drive governance and implementation across the T5 programme, embedding security throughout the lifecycle of IT and OT systems. You will serve as the central cybersecurity focal point for the project, providing technical leadership and governance oversight.

You will coordinate security reviews, risk assessments, testing activities, and regulatory compliance with internal teams and vendors, translating complex risks into actionable outcomes

Qualifications

• Degree in Cybersecurity or related discipline is required.
• 8–12 years of cybersecurity experience in critical infrastructure/aviation/OT environments preferred.
• Strong governance, architecture, risk management and assurance practices are essential.

Responsibilities

• Drive cybersecurity governance and implementation across the T5 programme.
• Act as central cybersecurity focal point and provide leadership to multiple teams and vendors.
• Coordinate security reviews, risk assessments, testing activities and regulatory compliance.
• Manage cybersecurity workstreams, architecture reviews, vulnerability assessments and pen testing.

Skills

Cybersecurity governance

Security architecture

Cyber risk management

Security assurance

Stakeholder management

Communication

Presentation

Vendor coordination

Education

Degree in Cybersecurity/CS/IT/Engineering

Certifications: CISSP/CISM/CRISC/GIAC or equivalent

Job description

Changi Airport Group is part of the inter-agency team developing Changi East, which encompasses the future Terminal 5 (T5) - set to be one of the largest airport terminals in the world. Changi Airport Group welcomes you to join the team helping to shape Singapore's aviation future.

You will be responsible for driving and overseeing cybersecurity governance and implementation across T5 systems. You will ensure cybersecurity is embedded throughout the lifecycle of all IT and Operational Technology (OT) systems, from planning and design to implementation, testing and operational readiness.

You will serve as the central cybersecurity focal point across the T5 programme, providing technical leadership and programme oversight to ensure cyber risks are effectively managed while supporting project delivery objectives. You will work closely with project teams, system owners, consultants, and vendors to coordinate security reviews, risk assessments, testing activities and compliance requirements.

The role will require you to lead cybersecurity engagements with internal and external stakeholders, translate complex technical risks into actionable outcomes, and oversee the delivery of cybersecurity workstreams across multiple systems and projects. You will also manage cybersecurity vendors and coordinate security architecture reviews, vulnerability assessments, penetration testing activities and regulatory compliance initiatives to ensure T5 systems are designed and delivered in a secure and resilient manner.

Requirements

• Degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related discipline.
• At least 8 to 12 years of relevant cybersecurity experience, preferably in critical infrastructure, aviation, transportation, OT/ICS or other mission-critical environments.
• Strong understanding of cybersecurity governance, security architecture, cyber risk management and security assurance practices.
• Experience leading large-scale programmes and managing cybersecurity workstreams involving multiple stakeholders and vendors.
• Familiarity with security-by-design principles, cybersecurity regulations, vulnerability management and security testing methodologies.
• Ability to review and challenge technical recommendations while providing strategic direction and governance oversight.
• Strong stakeholder management, communication and presentation skills, with the ability to engage both technical teams and senior management.
• Proven ability to coordinate cross-functional teams and drive cybersecurity outcomes in a complex and dynamic environment.
• Professional cybersecurity certifications such as CISSP, CISM, CRISC, GIAC or equivalent will be advantageous.
• This is a contract position.