Senior Manager (Cybersecurity)

About the role

PSA Group is looking for a strong team player and leader passionate about security, with at least 10 years of cybersecurity experience and around 5-7 years in technology architecture, threat intelligence, incident response and forensics. You will join the growing group cyber security team, with exposure to the planning and design of future port terminal developments and possible assignments at overseas port terminals in Europe and Asia.

Key responsibilities

• Help manage cybersecurity technology, engineering, advisories, vulnerability management, event and incident management across IT, OT, IoT and IIoT digital assets
• Contribute to architecture, threat intelligence and incident management standards, procedures and guidelines
• Monitor threat intelligence and look for new TTPs, indicators of compromise and exposure
• Design and issue vulnerability and threat intelligence advisories, and oversee vulnerability management and remediation
• Develop incident response plans, run drills, forensic exercises, table-top and red/purple teaming exercises, and provide Level 2 or 3 incident response on a 24x7 on-call basis
• Design or deploy IT, OT and IIoT solutions, aggregate and consume demand across business units
• Perform threat modelling on IT, OT and IIoT architectures and systems, and design AI-driven cybersecurity capabilities with governance for internal AI systems

Required profile

• Degree in Computer Science or a related discipline (essential)
• At least 10 years of cybersecurity experience (essential)
• Good knowledge of incident management and forensics procedures (e.g. GCIH, GCIA, GCFA or GREM) (essential)
• Certification such as GCIH, GCIA, GCFA, GREM, MITRE or equivalent (essential)
• Experience in incident response and forensics, and designing IT and OT cybersecurity architecture in a maritime, transport or logistics industry
• Project management experience with cybersecurity frameworks (NIST, ISO)
• Knowledge of maritime, logistics or transportation with international experience is an advantage

Required skills

• Cybersecurity architectural practices such as TOGAF or SABSA
• Control frameworks such as NIST CSF and ISO 27001
• OT frameworks such as NIST SP 800-82 and ISO/IEC 62443
• Maturity models such as C2M2, CMMC or CMMI
• Threat modelling, MITRE ATT&CK and AI for cybersecurity
• Strong communication, analytical and problem-solving skills, ability to work independently and in teams, willingness to travel at short notice