Senior Manager, Infrastructure Security & Operations

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of GovTech, is looking for a Senior Manager to lead Day 2 operations of the National Cybersecurity Command Centre (NC3). The role ensures that infrastructure, platforms and services stay secure, resilient, available and operationally effective, providing overall service-management leadership, coordinating operational stakeholders and vendors and driving continuous improvement through automation, reporting and product enhancements. The position is based in the Punggol Digital District.

Key responsibilities

• Lead end-to-end Day 2 operations, including observability, vulnerability and patch management, asset and configuration management, backup and recovery, firewall, privileged account and log reviews, incident response and network administration.
• Establish operational governance, service-level objectives, escalation paths, duty arrangements, SOPs and performance reporting for NC3 services.
• Coordinate change, release and maintenance activities, assessing risks and dependencies and ensuring proper testing, approvals, rollback plans and stakeholder communication.
• Direct incident and problem management, including major incidents, root-cause analysis, corrective actions and lessons learned.
• Oversee vulnerability remediation and security operations, prioritising by risk and impact, and escalate material gaps to management.
• Manage internal teams, service providers and vendors, reviewing quality, deliverables, resource allocation and compliance with contractual and security obligations.
• Own the operations improvement roadmap, turning recurring issues and user needs into automation, dashboards, reports and product backlog items.
• Define and monitor metrics on availability, capacity, performance, security, incident trends, change success, recovery readiness and automation benefits.
• Support audits, risk reviews and management reporting, and coach team members to build operational capability.
• Track license and subscription expiry, hardware and software end-of-life, and SSL certificate expiry; support CSA for onboarding, exit and transition of projects.

Required profile

• Relevant degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related discipline.
• At least 8 years of experience in infrastructure, platform, network, security or service operations, including leading multidisciplinary operational teams.
• Experience operating mission-critical, security-sensitive or government systems, coordinating across users, engineering teams and vendors.
• Working knowledge of security controls, audit and risk management, and Singapore Government requirements such as IM8 and GovTech policies and standards.
• Strong leadership, stakeholder management, analytical, decision-making and communication skills.

Required skills

• IT service management, observability, incident and problem management, change and release management, vulnerability and patch management, backup and recovery, and configuration or asset management.
• Ability to use operational data to prioritise improvements and drive automation and reporting.
• Certifications such as ITIL, PMP, CISSP, CISM or cloud/network certifications are advantageous.

What we offer

• A learning culture that encourages growth.
• Annual leave with additional perks such as Family Care and Birthday Leave.
• Collaborative working environment with helpful team members.
• Contract staff enjoy the same benefits as permanent staff.