Risk Management jobs in Singapore

At Singtel, we believe in the strength of a vibrant, diverse and inclusive workforce where backgrounds, perspectives and life experiences of our people help us innovate and create strong connections with our customers. We strive to ensure all our people practices are non-discriminatory and provide a fair, performance-based work culture that is diverse, inclusive and collaborative.

Join us and experience what it’s like to be with an Employer of Choice*. Together, let’s create a brighter digital future for all. *Awarded at the HR Fest Awards 2020.

• Develop and maintain a comprehensive cybersecurity GRC framework, policies, and procedures.
• Lead enterprise-wide risk assessments and recommend mitigation strategies.
• Oversee compliance with industry standards and regulatory requirements (e.g., ISO 27001, NIST, GDPR, SOC 2).
• Manage internal and external audits and support remediation initiatives.
• Provide strategic guidance on third-party/vendor risk management.
• Lead incident response planning and ensure post-incident evaluations are documented and actionable.
• Drive cybersecurity awareness and training programs across the organization.
• Collaborate with stakeholders to align cybersecurity strategies with business goals.
• Prepare executive-level reports and presentations on risk and compliance metrics.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Telecommunications, or a related field.
• 5+ years of professional cybersecurity experience, preferably with exposure to telecom or critical>
• Strong expertise in cybersecurity principles, including policy development, security architecture, risk management, and incident response.
• Understanding of data security best practices, secure data collection, and handling methods.
• Familiarity with telecom protocols and environments is a plus.
• Knowledge of relevant standards and regulatory frameworks (e.g., ISO 27001, NIST, GSMA guidelines).
• Experience with GRC tools (e.g., Archer, ServiceNow, MetricStream).
• Knowledge of cloud and hybrid infrastructure security practices.
• Ability to influence, coach, and build consensus across business unit.
• Preferred certifications:
• Cybersecurity certifications such as:Certified Information Systems Security Professional (CISSP)
  CompTIA Security+
  CISA
• Cloud security certifications such as:AWS Security Specialty or Azure Security Engineer Associate
• Other relevant certifications:GIAC certifications (GSEC, GPEN, GCIA)
• Strong analytical and problem-solving skills.
• Clear communicator with the ability to work cross-functionally.
• Detail-oriented with excellent documentation and organizational skills.
• Proactive, self-motivated, and committed to continuous improvement.