Full-timeTech & engineering· Posted 9 Sept

Manager, Risk Management

SMRTFrom company site

Salary

Not stated by the company

When

Full-time hours

Where

Singapore

Apply on company site

✨ How well do you match? Check in 10 seconds →

Free with a WorkJio account: we compare your profile with this job and show what you already meet.

Share with a friend

Start: Not stated
Work mode: On-site
Experience: Experienced

About the role

This role sits within SMRT and focuses on Operational Technology cybersecurity and cyber resilience. You will make sure the organisation meets cybersecurity regulations, policies and standards, oversee risk management activities, and help strengthen the overall security posture. It suits someone with a strong engineering background and deep cybersecurity knowledge who can work with multiple teams and manage audits and assessments.

What you'll do

Ensure compliance with CSA Cybersecurity Act, CCoP, relevant CSA guides, LTA CP8 and CSIMF, and CSA publications such as Security-by-Design Framework.
Oversee cybersecurity risk management, including risk control measures, monitor follow-up actions until completion, and provide regular updates to Management.
Manage contracts and deliverables for CCoP and CP8 audits, annual Risk Assessments, biennial Vulnerability Assessments for CII, and other contracts as required.

Know someone for this? Share it

WhatsApp Telegram Facebook LinkedIn

Manage waiver request submissions and reviews, and monitor follow-up actions from audits, Risk Assessments and Vulnerability Assessments.

Support the Policy & Governance team in developing and implementing cybersecurity risk policies, standards and guidelines for OT systems.

Gatekeep submissions of Material Change Form and CII Information Record (S10) Form within the specified timeline.

Report on OT Cybersecurity status for submission to Authority and/or Management.

Support cybersecurity training and competency development to build awareness, ownership and culture.

Support the conduct of Cybersecurity Management meetings.

Provide guidance to the OT Cybersecurity Operations team on managing CII and Non-CII Asset Information & Security baselines, Identity Management, Authentication and Access Control technical security solutions.

Collaborate with SMRT Risk Management, Internal Audit and Legal Teams on risk and compliance matters.

Support validation checks to ensure security control measures are maintained.

Support cybersecurity exercises such as Table-Top Exercise for CII.

Good to know

Location: Singapore.

Requirements

Degree in Electrical & Electronics Engineering, Computer Science or equivalent.
At least 7 to 8 years of working experience in the engineering field.
Cybersecurity-related qualifications and/or certifications such as CISM, CISSP, CEH or CISA are preferred.
Good knowledge of cybersecurity regulations, principles, standards and processes.
Good knowledge of cybersecurity risk assessment and vulnerability assessment.
Strategising, Planning and Organising skills.

Apply on the company website

You will leave WorkJio. Never pay a fee or share your Singpass password, OTP or bank log-ins to apply.

Open application

Listed from SMRT’s own careers page and not yet verified by WorkJio. You apply on the company’s site. See all their roles.

Is this your company? Roles that show a salary rank higher on WorkJio. Claim or remove this listing

Manager, Risk Management

About the role

What you'll do

Good to know

Requirements

More jobs like this

Senior Data Scientist

Senior Specialist, End User Services (EUS)

Senior Specialist, Infrastructure

Cluster iT Specialist - The St. Regis Singapore

Deputy Director, Data Science (SWDA)

Performance Test Lead