Cyber Security Manager

About the role

The Cyber Security Manager will lead the organisation’s effort to strengthen its cybersecurity posture, ensure compliance with data‑protection regulations such as the PDPA, and coordinate closely with the Data Protection Officer. The role oversees security monitoring, incident response, audits, certifications and security awareness across the company.

Key responsibilities

• Monitor Trend Micro and other security tools daily, investigate and remediate critical vulnerabilities and incidents.
• Plan and manage penetration tests, annual cybersecurity assessments and ensure timely resolution of findings.
• Lead preparation for Cyber Trust Mark certification and other external audits.
• Conduct monthly phishing simulations and quarterly security‑awareness training for employees.
• Collaborate with the DPO on privacy audits, risk assessments and data‑protection policy updates.
• Manage security projects, evaluate third‑party vendor security and contribute to the overall security strategy.

Required profile

• 5+ years of experience in cybersecurity or information security, covering operations, risk management and compliance.
• Hands‑on experience with security monitoring, incident response and vulnerability management.
• Strong knowledge of PDPA and data‑protection regulations, with experience supporting privacy audits.
• Proven track record of leading security audits, certifications (e.g., Cyber Trust Mark, ISO 27001) and security‑awareness programmes.
• Ability to lead cross‑functional projects, manage vendors and communicate risks to senior management.

Required skills

• Trend Micro (server, email, mobile, endpoint) security tools.
• Penetration testing and vulnerability scanning.
• Risk assessment methodologies.
• ISO 27001 framework and Cyber Trust Mark certification processes.
• Phishing simulation platforms.