Security Engineering Manager

About the role

The NETS Group, a payments services group operating Singapore's national debit scheme, is looking for a Lead - Security Engineering. The role designs, implements and manages information security solutions that protect systems and data, working closely with the Head of Security Engineering, Security Operations, Technology, Governance, Risk & Compliance, TPRM and Legal.

Key responsibilities

• Architect, design and implement information security tools in line with NETS security requirements, regulations and standards such as NIST and ISO 27001
• Present architectures and designs at governance and approval forums and manage IS platforms, including configuration, change, incident and problem management under SLAs
• Oversee privileged access management, vulnerability management, KRI reporting, audit coordination, compliance initiatives and service requests
• Track operational performance, identify risks and drive remediation, and set up security metrics and dashboards for senior management
• Embed automation and AI-driven capabilities, manage vendor and partner relationships, and support budget planning for security platforms
• Lead the Security Engineering team, contribute to the security strategy and roadmap, and provide leadership during major security incidents
• Develop and maintain security standards, procedures and documentation

Required profile

• Minimum 15 years of experience in security (cybersecurity, network, information and data security) in complex enterprise environments
• Proven experience implementing and managing information security programs such as ISMS (ISO 27001) and SOC 2 Type II
• Strong understanding of security frameworks, risk management and regulatory compliance in a banking or highly regulated environment
• Leadership and people management experience, with a track record of delivering services to SLAs
• Experience in security operations and engineering, incident response support and risk remediation
• Vendor and third-party management experience
• Relevant certifications such as CISSP, CISM, CISA, CRISC or equivalent

Required skills

• Hands-on experience with PAM, SIEM, SOAR, EDR/XDR, NDR, IPS/IDS, DLP, WAF and vulnerability management tools
• Familiarity with automation and AI-driven security capabilities
• Excellent communication, presentation and documentation skills