Security Manager (Public Sector Project)

Role Summary

The Security Manager is responsible for leading and overseeing cybersecurity governance, risk management, compliance, and operational security functions for Singapore Government and Public Sector projects. This role ensures that systems, applications, cloud environments, and supporting infrastructure are designed, implemented, and operated in accordance with Government security requirements, regulatory obligations, and industry best practices.

The incumbent will serve as a trusted advisor to project stakeholders, Government agencies, auditors, and technology teams, driving a strong security posture through effective governance, risk mitigation, compliance assurance, and continuous security improvement initiatives.

Key Responsibilities

Establish, maintain, and continuously enhance cybersecurity policies, standards, procedures, and governance frameworks and agency-specific security requirements.

Ensure compliance with applicable regulatory, contractual, and security requirements throughout the project lifecycle

Manage security accreditation activities including VA/PT, Security Assessment Reports and remediation.

Oversee security monitoring, incident response, vulnerability management and patch governance.

Promote and enforce Secure-by-Design and Security-by-Default principles across systems, applications, cloud platforms, and infrastructure.

Ensure security controls are appropriately implemented and maintained throughout the technology stack.

Act as primary cybersecurity liaison with Government agencies, auditors, vendors and project stakeholders.

Lead, mentor, and develop cybersecurity personnel, fostering a high-performance security culture.

Drive cybersecurity awareness, training, and capability-building initiatives across project and operational teams.

Provide strategic direction and thought leadership on emerging cybersecurity risks, technologies, and industry trends.

Qualifications and Experience

Bachelor Degree in Cybersecurity, Information Security, Computer Science or related discipline

Minimum 8 years of cybersecurity experience with at least 3-5 years in a leadership role

Good to have experience in Singapore public sector projects

Demonstrated experience in cybersecurity governance, risk management, compliance, security operations, and security assurance activities

Good to have experience with government security requirements

Good knowledge of ISO standards (ISO 9001, ISO/IEC 27001, ISO/IEC 12207)

Professional certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 Lead Auditor are highly desirable.