SMO System Manager (Systems Mgt Office - Compliance Ops)

NCS; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NCS is seeking a seasoned SMO System Manager for Governance & Compliance, IT Security & Compliance in Singapore. You will lead service governance, security compliance, and risk management for a Defence client environment.

The role sits at the intersection of service management and cybersecurity governance, requiring close collaboration with project teams, auditors, agency security, and partners to ensure secure, compliant, and resilient services.

Qualifications

• Experience in IT service management and cybersecurity governance.
• Strong understanding of IT security compliance and risk remediation.
• Familiarity with defence/governmentregulated environments preferred.
• Knowledge of ITIL, CIS Controls, ISO 27001 helpful.

Responsibilities

• Lead governance, risk, and compliance activities across the project team and service environment.
• Oversee IT security and compliance matters, including security controls, audit readiness, and risk reporting.
• Manage service management governance across incident, problem, change, release, configuration, and continuity processes.
• Act as primary contact for security incident-related matters and coordinate with stakeholders.
• Review and guidance on security/compliance artefacts including government submissions and risk papers.
• Coordinate CSA Tier 1 and GHT papers where applicable.
• Engage stakeholders on risk, governance, compliance, IT security, vulnerabilities, and remediation plans.
• Drive adherence to ITIL, IM8, CIS Controls, ISO27001 and government security requirements.
• Monitor vulnerabilities and coordinate remediation with technical teams.
• Ensure risks and security issues are documented, prioritized, and resolved by delivery teams.
• Prepare governance reports, risk registers, audit responses, and management summaries.

Skills

IT service management

Cybersecurity governance

IT security compliance

Risk management

Audit coordination

Defence/government environments

Job description

• Full-time
• Department: Others

Company Description

NCS is a leading AI Tech Services company. With a 15,000-strong team across the Asia Pacific, NCS scales its platforms and capabilities to provide clients with greater agility and AI expertise across a range of Industries. Embracing a strong ecosystem of global partners, NCS transforms technology services delivery combining AI with digital resilience to drive real business impact. NCS is a subsidiary of the Singtel Group.

Job Description

NCS is looking for a strong SMO System Manager for Governance & Compliance, IT Security & Compliance to lead service governance, IT security compliance, and risk management for a Defence client environment.

This is a client-facing role that sits at the intersection of service management, cybersecurity governance, compliance, and operational security assurance. The successful candidate will work closely with project teams, client stakeholders, auditors, agency security teams, internal delivery teams, and Partners to ensure services are secure, compliant, well-governed, and operationally resilient.

Key Responsibilities

• Lead governance, risk, and compliance activities across the project team and service environment.
• Oversee IT Security and Compliance matters, including security controls, compliance tracking, audit readiness, remediation follow-up, and risk reporting.
• Manage service management governance across incident, problem, change, release, configuration, and service continuity management processes.
• Serve as the key point of contact for security incident-related matters within the project team, ensuring timely coordination, escalation, reporting, and closure.
• Review, assess, and provide guidance on security and compliance artefacts, including government security submissions, risk papers, control documents, and clearance papers.
• Support the review and coordination of CSA Tier 1 and Generic Host Template (GHT) papers where applicable.
• Engage stakeholders on topics such as risk, governance, compliance, IT security, vulnerabilities, control gaps, audit findings, and remediation plans.
• Drive compliance with relevant policies, standards, and frameworks, including ITIL, IM8, CIS Controls, ISO 27001, and other applicable government security requirements.
• Monitor and track vulnerabilities, including CVE and known exploited vulnerability exposure, and coordinate remediation with technical teams.
• Work with delivery teams to ensure service risks and security issues are properly assessed, documented, prioritised, and resolved.
• Prepare governance reports, compliance updates, risk registers, audit responses, and management-level summaries for client and internal stakeholders.
• Promote a strong culture of service discipline, security awareness, accountability, and continuous improvement across the project team.

Qualifications

• Strong experience in IT service management, cybersecurity governance, IT security compliance, risk management, or audit coordination.
• Prior experience supporting Defence, Public Service, or government-regulated environments is highly preferred.
• Good understanding of ITIL-based service management processes, including incident, problem, change, release, configuration, and service continuity management.
• Strong working knowledge of security governance, compliance controls, vulnerability management, audit readiness, and risk remediation.
• Familiarity with IM8, CIS Controls, ISO 27001, CVE tracking, and known exploited vulnerability management.
• Able to engage confidently with diverse stakeholders, including client teams, auditors, agency security representatives, project teams, technical teams, and Partners.
• Strong writing and review skills for governance papers, compliance documentation, audit responses, and risk submissions.
• Comfortable deep diving into complex governance, security and compliance topics while keeping stakeholders aligned on practical outcomes.
• Experience with CSA Tier 1, GHT papers, or other government/security clearance papers will be an advantage.
• Knowledge of CSA Cloud Controls Matrix is optional but beneficial.

Preferred Certifications

• CISSP, CISA, or CISM preferred.
• ITIL 4 or ITIL 5 certification preferred.
• ISO 27001 Lead Implementer / Implementer certification is good to have.

Ideal Candidate Profile

You are a structured, client-facing service and security governance professional who can connect policy, process, risk, and operations. You are comfortable working with technical teams and non-technical stakeholders, and you can translate security and compliance requirements into clear actions that support secure and reliable service delivery. This is a Day 2 role.

Additional Information

We are driven by our AEIOU beliefs-Adventure, Excellence, Integrity, Ownership, and Unity and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.