VP Security Operations (Cybersecurity)

SBS Transit Ltd; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

SBS Transit Ltd seeks a senior cybersecurity leader to head the cybersecurity operations function, defending SBST IT and OT environments. You will manage incidents, security technologies, and regulatory compliance while driving continuous improvement of cyber resilience across the organisation.

You will lead a team, coordinate with internal and external forums, and ensure robust controls, incident playbooks and readiness for tabletop exercises and audits in line with CCoP 2.0, ISO27001 and other

Qualifications

• Min. Degree in Computer Engineering or equivalent.
• Trained in Cybersecurity, Information Security, Forensics or equivalent.
• 15-25 years of direct cybersecurity work experience in policy, incident response and management.
• CISSP/CISM/CISA/CEH/CRISC or equivalent certification.
• Strong knowledge of email security, vulnerability management, penetration testing, network security and IT/OT practices.
• Experience with threat detection, red/purple/blue teaming.
• ISO27001, IEC62443, NIST, CSA CCoP familiarity.
• Public transport/OT industry experience is valued.

Responsibilities

• Lead cybersecurity operations for IT and OT environments.
• Oversee incident handling, triage and response across IT & OT.
• Manage tools and services (EDR/XDR, SIEM, etc.) and vendor relations.
• Develop policies, playbooks and incident response plans.
• Coordinate audits and tabletop exercises; ensure regulatory compliance.
• Plan budgets and drive continuous improvement of cyber resilience.

Skills

Cybersecurity leadership

Incident response

Threat detection

Regulatory compliance

Security architecture

Communication skills

Education

Degree in Computer Engineering

Tools

SIEM

EDR/XDR

Cloud security (AWS/Azure)

M365 security

Vulnerability management

Job description

Lead the cybersecurity operations function to proactively defend SBST IT and OT environments against cyber threats, manage cyber incidents and security technologies, ensure regulatory compliance, and drive continuous improvement of cyber resilience.

Major Responsibilities

Lead, manage and work with team members on the following:

• Involve in sector-wide cybersecurity programme and engagement.
• Coordinate and contribute to various external and internal forums and meetings.
• Manage, administrate and provide all cybersecurity operations, services (e.g. VAPT) and tools management.
• Manage EDR/XDR (Endpoint Detection and Response/Extended
• Detection and Response) tools and respond to incidents with the support of various SOC teams.
• Identify cyber security threats to systems, detect security anomalous activities and perform analysis of security logs from multiple sources.
• Identify emerging threats and vulnerabilities and recommend appropriate advisories, controls and solutions for implementation to enhance cybersecurity posture.
• Formulate cybersecurity policies, procedures and documentation for IT and OT systems, ensuring compliance with regulatory requirements and industry best practices (e.g. Cybersecurity Code of Practice (CCoP 2.0), CP8, ISO27001 etc.).
• Work closely with internal and external stakeholders regularly to draft and enhance cybersecurity incident response plans and playbooks to achieve cybersecurity readiness.
• Responsible for the handing of cyber incident and crisis in accordance with procedures, which include triage and handling of all cybersecurity alerts and incidents across IT & OT environments.
• Perform security analysis on cloud platforms such as AWS, Azure as well M365 services.
• Support in regulatory and sectorial audits as and when necessary.
• Involve in the planning, conducting and exercising of TTXs (tabletop exercises), penetration tests and other cybersecurity (e.g. red/purple/blue teaming) exercises as and when necessary.
• Oversee the development, testing, and maintenance of cybersecurity measures to safeguard both IT and OT Critical Information Infrastructure (CII) assets.
• Evaluate, manage and liaison with cybersecurity vendors to ensure fulfilment of cybersecurity services.
• Plan and implement budgeted cybersecurity projects based on business requirements.

Job Requirement

• Min. Degree in Computer Engineering or equivalent.
• Trained in Cybersecurity, Information Security, Forensics or equivalent
• Min. 15-25 years of direct and relevant full-time cybersecurity work experience in policy formulation, incident response, and management, regulatory oversight and compliane
• CISSP/CISM/CISA/CEH/CRISC or equivalent certification
• Strong domain knowledge of multiple cybersecurity practices (Email security solutions, vulnerability management, penetration testing, network security (firewall, IPS/IDS, SIEM, threat intelligence, etc.) and industry IT/OT and cybersecurity best practices.
• Experience in Threat detection, Penetration testing and red/purple teaming
• Knowledge in ISO27001 and IEC62443, NIST Cybersecurity Framework, CSA Code of Practice (CCoP).
• Knowledge in Network, Web Security and Application Security would be highly valued.
• Experience with information security tools (SIEM, anti-virus tools etc.).
• Experience in forensics and incident management.
• Strong leadership qualities & ability to work under pressure.
• Self-motivated, a good team player and strong ability to multi-task.
• Excellent verbal, written communication, presentation and analytical skills.
• Ability to build strong and trusting relationships
• Experience working in public transport and/or OT industry would be highly valued.

By submitting this application for this position, you acknowledge that you have read the Data Protection Policy for Job Applicants (the “Policy”) of SBS Transit Ltd and its subsidiaries, affiliates and related corporations (‘SBST”) and consent to:

a. The collection, use and disclosure of your personal data by SBST for the purposes of your application and potential employment with SBST and the purposes set out in the Policy: and

b. SBST’s retention of your personal data for 2 years for consideration of future job opportunities (where applicable) from the date of submission of application.