Cyber Security Specialist (DevSecOps Project Manager)

About the role

We are looking for a Cyber Security Specialist who will lead DevSecOps capability delivery for our Enterprise Cybersecurity Engineering team. This manager‑level position blends project management expertise with deep knowledge of the Secure Software Development Life Cycle (Secure SDLC) to drive security initiatives across the organization.

Key responsibilities

• Secure SDLC Delivery: Integrate security principles and automated gates throughout all software development stages.
• Project Governance: Define scope, timelines, budgets and actively manage cross‑workstream risks, dependencies and change requests.
• Cross‑Functional Alignment: Partner with engineering, architecture, operations and procurement to synchronize workflows and deliverables.
• Executive Reporting: Maintain dashboards, status reports and executive summaries to ensure full transparency for leadership.

Required profile

• Degree in Information Technology, Computer Science or equivalent practical experience.
• Proven track record in technical project management delivering security or DevSecOps initiatives, preferably in financial services or asset management.
• Hands‑on experience with CI/CD pipelines, container orchestration, Infrastructure as Code and policy‑as‑code tools.
• Strong understanding of OWASP Top 10, cryptography basics, supply‑chain security and cloud security operations.
• Experience in threat modeling, secure design reviews, risk assessments and vulnerability management.

Required skills

• Secure SDLC
• CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins)
• Docker, Kubernetes
• Terraform, CloudFormation
• OPA (Open Policy Agent)
• OWASP Top 10
• Cryptography basics
• SBOM, SLSA
• Microsoft Sentinel, AWS Security Hub, GuardDuty, CloudTrail, CSPM
• Threat modeling, secure design reviews, risk assessment, vulnerability management

What we offer

• Competitive contract salary of SGD 7,000–10,000 per month.
• Opportunity to lead high‑impact security projects in a dynamic, multinational environment.
• Access to cutting‑edge security tools and continuous professional development.