Manager, Digital & Technology (IT Security)

About the role

CapitaLand Investment Limited (CLI), a global real asset manager headquartered in Singapore, is looking for a Manager, Digital & Technology (IT Security). The role leads the cybersecurity architecture, security engineering, infrastructure security, endpoint security, application security and data protection functions, drives the cybersecurity technology roadmap and ensures security-by-design across infrastructure, cloud, data, AI and application initiatives. It also leads the team responsible for cybersecurity platforms, application security, data protection and enterprise security architecture.

Key responsibilities

• Develop and execute the cybersecurity architecture and technology roadmap aligned with business objectives and enterprise strategy.
• Establish and maintain security architecture standards, patterns, technical guidelines and reference architectures, and lead security architecture reviews.
• Assess emerging technologies, threats and new initiatives to identify risks and recommend controls, embedding security-by-design in solution design and delivery.
• Oversee security controls across infrastructure, cloud, networks and endpoints, and lead the deployment and optimisation of cybersecurity platforms.
• Drive endpoint protection, hardening, vulnerability management and privileged access controls.
• Lead the application security programme, including secure development practices, assessments and remediation.
• Oversee data protection controls such as data classification, encryption, key management, DLP and privacy requirements.

Required profile

• Degree in Information Security, Computer Science, Information Technology or a related discipline.
• 5 years of cybersecurity experience, including at least 2 years in a leadership or managerial role.
• Familiarity with NIST CSF 2.0, CIS Controls, ISO 27001 and relevant regulatory requirements.
• Strong stakeholder management, project delivery and vendor management experience.

Required skills

• Security architecture, infrastructure and endpoint security, cloud security (Azure, Alibaba Cloud)
• Application security and secure SDLC, data security and privacy
• IAM/PAM, security platforms (SIEM, EDR, DLP, email security, vulnerability management)
• AI security and API security

What we offer

• Flexible benefits with comprehensive medical coverage for self and family.
• Training and development opportunities.
• Subsidised rates at Ascott serviced residences.
• Volunteerism advocacy and wellness programmes.