Manager, Cyber Security - APAC

About the role

Cigna Healthcare is looking for a Manager, Cyber Security for its APAC region. The role provides general technical, operational and risk management support to the Global Information Security (GIS) APAC team, enforcing standard information protection controls through infrastructure, application and third-party security assessments. It works closely with the GIS APAC team to identify, evaluate and remediate weaknesses in Cigna's systems, supports dashboard reporting, incident response coordination, risk assessments and other GIS-led initiatives.

Key responsibilities

• Track and resolve issues with local technology and business teams.
• Work with the local and international Business Continuity Management team so that BCP/DR controls meet GIS policies, standards and regulatory requirements.
• Manage security incidents relevant to the APAC region with GIS APAC and key stakeholders.
• Review and approve application and infrastructure changes from a security perspective.
• Produce accurate security reports with remediation recommendations and communicate risks to technology teams.
• Support local regulatory reviews and assess compliance with local security regulatory notices.
• Help GIS and technology teams implement standard security solutions aligned with business, technology and threat drivers.
• Maintain strong relationships with information risk managers across the organisation and stay up to date on emerging threats and architectures.
• Monitor progress of staff awareness of phishing tests and awareness training.
• As a Material Risk Personnel under the MAS IACG, support senior management in overseeing technology and information security risks, escalate material cyber and technology risks, incidents and control weaknesses, and oversee third-party and outsourcing security risks.

Required profile

• Bachelor's degree in Technology, Computer Science or a related subject preferred.
• 5 years or more of security operations or security governance, risk and compliance experience.
• Strong understanding of security frameworks, standards and best practices (e.g. NIST CSF, ISO 27001, PCI DSS v.4).
• Knowledge and experience of Singapore technology-related regulations (e.g. MAS Technology Risk Management Guideline).
• CISSP, CRISC or similar certification desired.
• Strong analytical, problem-solving and communication skills, able to prepare documentation and presentations for technical and non-technical audiences.

Required skills

• Windows and Unix/Linux operating systems.
• Core Internet protocols (TCP, UDP, DNS, TLS, IPsec) and the OSI model.
• Encryption fundamentals (symmetric/asymmetric, ECB/CBC, AES).
• Cloud environments (SaaS, PaaS, IaaS) and OWASP.
• Networking fundamentals and common attacks, vulnerability analysis and remediation recommendations.