Kerja Sepenuh Masa, Cybersecurity and Technology Risk Manager di Kerry Consulting - Maukerja

We are partnering with an established multinational organisation with a significant presence in Singapore to appoint a Cybersecurity and Technology Risk Manager to oversee cybersecurity, technology risk and resilience across enterprise systems, cloud infrastructure, digital platforms and third-party ecosystems.

This role requires a well-rounded cybersecurity professional who can balance strategic risk management with hands-on security expertise, strengthening the organisation's security posture while supporting ongoing digital transformation.

Key Responsibilities:

Cybersecurity Strategy & Governance

• Develop and implement cybersecurity and technology risk strategies aligned with business objectives and enterprise standards.
• Establish and enhance security policies, frameworks and controls based on NIST CSF, ISO 27001 and industry best practices.
• Embed security-by-design principles across technology initiatives, incorporating Zero Trust and cloud security practices.
• Monitor security effectiveness, identify control gaps and drive continuous improvement.

Cybersecurity Operations & Threat Management

• Oversee security monitoring, threat detection, vulnerability management and incident response capabilities.
• Strengthen security controls across endpoints, networks, cloud, applications, APIs and enterprise platforms.
• Work with internal teams and external providers to identify and remediate vulnerabilities, leveraging automation where appropriate.

Technology Risk, Compliance & Third-Party Security

• Lead technology and cybersecurity risk assessments, identifying material risks and recommending mitigation strategies.
• Ensure compliance with applicable regulations and standards, including PDPA and PCI DSS.
• Coordinate security audits, regulatory assessments and remediation activities.
• Oversee third-party security assessments, due diligence and ongoing risk monitoring.
• Develop risk metrics and management reporting to support executive decision-making.

Incident Management & Business Resilience

• Develop and maintain cybersecurity incident response, business continuity and disaster recovery capabilities.
• Coordinate incident response and recovery activities to minimise business disruption.
• Conduct tabletop exercises and crisis simulations to strengthen organisational readiness.

Digital Security & Secure Transformation

• Partner with technology and engineering teams to embed security into cloud, infrastructure and digital transformation initiatives.
• Support secure software development, application security and DevSecOps practices.
• Strengthen security across modern workplace technologies, SaaS platforms and digital applications.

Stakeholder Management & Security Awareness

• Collaborate with regional and global cybersecurity teams to align security practices with enterprise standards.
• Advise business and technology stakeholders on cybersecurity risks and improvement initiatives.
• Promote security awareness and provide regular updates to senior management on security posture, emerging threats and key risks.

Requirements:

• Bachelor's degree in Computer Science, Information Security, Information Technology or a related discipline.
• 6–10 years of relevant experience in cybersecurity, technology risk or information security, including at least 3 years in a security leadership capacity.
• Broad expertise across cybersecurity operations, security governance, technology risk management and regulatory compliance.
• Strong understanding of cloud security, network security, endpoint protection, IAM, vulnerability management and incident response.
• Experience implementing cybersecurity strategies and security improvement initiatives within complex enterprise environments.
• Familiarity with NIST CSF, ISO 27001, PDPA and PCI DSS.
• Experience managing third-party security risks, audits, business continuity and disaster recovery.
• Strong stakeholder management and communication skills, with the ability to translate technical risks into practical business recommendations.
• Relevant certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 would be advantageous.

To Apply:

Interested candidates are invited to submit their resume to Chen Yi at *************, quoting the job title in the subject line.

We regret that only shortlisted candidates will be notified.

Registration No: R1876389

Licence No: 16S8060