Transit Ticketing Governance & Security Lead

LTA Land Transport Authority; Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

LTA Land Transport Authority seeks a Deputy/Manager for Transit Ticketing System governance to lead security, risk and compliance across the public transit fare system used in Singapore. You will own governance ownership, drive controls, and collaborate with internal teams and contractors to sustain system integrity and trust.

Responsibilities include enforcing data protection policies, monitoring cybersecurity controls, and coordinating audits and incident responses to minimize service

Qualifications

• Knowledge of computer science, engineering or information technology and cyber security.
• Experience in cyber security operations and incident management.
• Understanding of information security and data protection principles.
• Familiarity with ISO 27001, PDPA and PCI-DSS security standards.
• Strong communication and stakeholder management skills.

Responsibilities

• Maintain governance framework for Transit Ticketing System security, risk and compliance, guiding operations and ensuring availability and integrity.
• Oversee cybersecurity and data protection governance, monitor controls, and report KPIs to management.
• Support audits, risk assessments and action plans; track mitigation of security and privacy risks.
• Lead incident management including detection, containment, eradication and recovery, with root cause analysis.
• Promote cybersecurity awareness and staff training across teams and contractors.

Skills

Cyber security operations

Incident management

Data protection

ISO 27001

PDPA

PCI-DSS

Stakeholder management

Job description

LTA Land Transport Authority seeks a Deputy/Manager for Transit Ticketing System governance to lead security, risk and compliance across the public transit fare system used in Singapore. You will own governance ownership, drive controls, and collaborate with internal teams and contractors to sustain system integrity and trust.

Responsibilities include enforcing data protection policies, monitoring cybersecurity controls, and coordinating audits and incident responses to minimize service