Cybersecurity Manager (Engineering)

About the role

NCS, an AI tech services company and subsidiary of the Singtel Group, is looking for an experienced Cybersecurity Manager to lead its Cybersecurity Engineering team in Singapore. The role provides technical leadership, operational oversight and strategic direction across vulnerability assessment, penetration testing, security operations, incident response, system hardening and patch management, while driving service quality, client partnerships and the development of cybersecurity talent.

Key responsibilities

• Manage and mentor cybersecurity engineers supporting VAPT, SecOps, incident response, hardening, patching and platform operations.
• Guide and oversee vulnerability assessments and third-party penetration tests, validate remediation, and support security monitoring and incident response.
• Review and approve client-ready deliverables such as VAPT reports, incident reports, executive summaries, remediation plans, risk registers, log and firewall rule reviews and evidence packs.
• Ensure activities are delivered within agreed scope, timelines, service levels and quality standards, and act as the primary escalation point for critical vulnerabilities, high-risk findings and incidents.
• Create incident response playbooks and run tabletop exercises with stakeholders.
• Work with clients, internal teams, vendors and management to prioritise remediation, patching, hardening and risk treatment, and assess findings against business impact, exploitability, exposure and operational constraints.
• Manage incident activation and response coordination, including triage, investigation, containment, eradication, recovery, reporting and lessons learned.
• Monitor KPIs such as incident response time, vulnerability closure rate, patch compliance and platform health.
• Promote knowledge sharing, coaching, certification readiness and continuous learning within the team.

Required profile

• Experience in mission-critical, regulated, government, aviation, critical infrastructure or enterprise environments.
• Experience managing vulnerability remediation programmes and incident response activities.
• Experience reviewing VAPT reports, incident reports, hardening assessments and security architecture recommendations.
• Ability to define KPIs, track service performance and present cybersecurity posture to management and clients.
• Preferred: ability to manage support teams, engage stakeholders, handle escalations and meet service commitments, plus strong written and oral communication and coaching skills.

Required skills

• Familiarity with frameworks such as NIST CSF, NIST Incident Response, CIS Controls, CIS Benchmarks, ISO 27001, MITRE ATT&CK, Cyber Kill Chain or IEC 62443.
• Hands-on exposure to SIEM/EDR/XDR/PAM/Firewalls/IPS and asset/patch management tools.
• Sound knowledge of operating systems and networking, including the TCP/IP protocol stack.
• Preferred certifications: CISSP, GIAC GSEC/GCIH, GMON, CCNP Security or equivalent.