IT Security Manager (Public Sector)

Role Summary

We are looking for an experienced Security Manager to lead cybersecurity governance, risk, compliance, and security operations for large-scale public sector projects.

You will work closely with government stakeholders, auditors, vendors, and technology teams to ensure systems and infrastructure remain secure, compliant, and well-governed throughout the project lifecycle.

Key Responsibilities

• Lead cybersecurity governance, risk, compliance, and security assurance activities.
• Develop and maintain security policies, standards, procedures, and governance frameworks.
• Manage security assessments, VA/PT, remediation, and audit activities through to closure.
• Oversee vulnerability management, patch governance, security monitoring, and incident response.
• Ensure Secure-by-Design and Security-by-Default principles are incorporated into applications and infrastructure.
• Serve as the key cybersecurity contact for government stakeholders, auditors, vendors, and project teams.
• Identify security risks, recommend mitigation measures, and drive continuous security improvements.
• Lead and mentor security team members while promoting security awareness across project teams.
• Prepare and present updates on security posture, risks, compliance, vulnerabilities, and remediation status to management.

Requirements

• Degree in Cybersecurity, Information Security, Computer Science, or a related discipline.
• 8 years of cybersecurity experience, with at least 3–5 years in a leadership or managerial capacity.
• Strong experience in security governance, risk management, compliance, security operations, and security assurance.
• Hands-on experience managing VA/PT, vulnerability remediation, security assessments, and security audits.
• Good understanding of security controls across applications, infrastructure, and enterprise IT environments.
• Experience supporting Singapore Government or highly regulated environments is an advantage.
• Knowledge of ISO/IEC 27001, ISO 9001, and ISO/IEC 12207 is beneficial.
• Strong stakeholder management, leadership, communication, and reporting skills.
• Certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Auditor are highly desirable.