Information Technology Security Manager

About the role

The Information Technology Security Manager leads the implementation of IT Security Strategy across on-premises and cloud environments, working closely with internal IT teams and external vendors to strengthen the organization's cybersecurity posture. The position is open to Singaporean candidates only.

Key responsibilities

• Incident response and monitoring: work with SIRO/SIRM, the IT Security Officer and the SOC to detect and respond to threats, lead incident response and post-mortems, share advisories and threat intelligence, and take part in tabletop exercises, audits and third-party assessments.
• Security product management: monitor SIEM events (Splunk, Cortex, Exabeam), triage and analyse them, and run vulnerability assessments (Tenable Nessus) on applications, networks and devices.
• Governance and compliance: lead security reviews against policies, standards and best practices, recommend improvements, ensure CIS hardening compliance, and track vulnerability remediation.
• Network, systems and endpoint security: manage and tune security tools, protect on-premises and cloud environments, and review accounts regularly.
• Documentation and reporting: maintain policies, SOPs, baselines and incident records, and deliver regular reports on metrics, trends, compliance and risk mitigation.
• Team leadership and collaboration: mentor IT Security Officers, work with IT teams and vendors, and liaise with SIRO/SIRM, cloud providers and other stakeholders.

Required profile

• Bachelor's degree in information security, computer science or a related field.
• At least 5 years of experience in an IT security leadership role, preferably including 1 year in cloud security.
• Singaporean only.
• Preferred: CISSP or CISM; cloud certifications such as CCSP, AWS Security Specialty, Azure Security Engineer Associate are advantageous.

Required skills

• Hands-on use of security tools such as SIEM, WAF, AV, EDR, PAM and DAM.
• Vulnerability management, threat analysis and incident response.
• Secure network design, endpoint security and system hardening.
• IaC security (Terraform, CloudFormation) and CI/CD security.
• Familiarity with ICT security compliance frameworks and risk management.