Manager, IT Security (Cybersecurity Governance)

About the role

CapitaLand Investment Limited (CLI), a global real asset manager headquartered in Singapore, is hiring a Manager, IT Security. The role drives cybersecurity governance, risk management, compliance, policy management, OT security governance and security awareness across the Group, working with business, technology, property operations and external stakeholders to strengthen the cybersecurity posture and manage cyber risks.

Key responsibilities

• Lead and manage cybersecurity governance, risk and compliance (GRC) activities across the organization
• Develop, maintain and enhance cybersecurity policies, standards, procedures and guidelines aligned with business and regulatory requirements
• Lead security architecture reviews for infrastructure, cloud, network, endpoint, application, data and digital transformation initiatives
• Drive compliance with regulations and frameworks such as PDPA, PCI DSS, ISO 27001 and the NIST Cybersecurity Framework
• Manage cybersecurity risk assessments and the enterprise cyber risk register, including risk mitigation plans
• Coordinate internal and external audits, assessments and compliance reviews, and drive remediation of findings
• Oversee third-party cybersecurity risk assessments and work with vendors to close security gaps
• Establish and maintain OT and IoT cybersecurity governance for smart building, property technology and operational technology environments
• Integrate cybersecurity requirements with enterprise architecture, infrastructure and application teams, and manage cybersecurity projects and initiatives
• Collaborate with regional teams, including counterparts in China, to ensure consistent cybersecurity governance

Required profile

• Degree in Information Security, Computer Science, Information Technology or a related discipline
• Minimum 5-8 years of experience in cybersecurity, information security, GRC or technology risk management
• Experience managing cybersecurity initiatives across complex enterprise environments
• Experience working with multiple business units and regional stakeholders; ability to work independently and manage multiple priorities

Required skills

• Cybersecurity frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, PCI DSS and PDPA
• Cybersecurity governance, risk assessments, audit management and policy development
• OT/IoT cybersecurity knowledge and smart building technologies are advantageous
• Professional certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer or Lead Auditor preferred

What we offer

• Flexible benefits with comprehensive medical coverage for self and family
• Training and development opportunities
• Subsidised rates at Ascott serviced residences
• Staff volunteerism advocacy and wellness programmes