Security Manager (Public Sector Project)

Role Summary The Security Manager is responsible for leading and overseeing cybersecurity governance, risk management, compliance, and operational security functions for Singapore Government and Public Sector projects. This role ensures that systems, applications, cloud environments, and supporting infrastructure are designed, implemented, and operated in accordance with Government security requirements, regulatory obligations, and industry best practices. The incumbent will serve as a trusted advisor to project stakeholders, Government agencies, auditors, and technology teams, driving a strong security posture through effective governance, risk mitigation, compliance assurance, and continuous security improvement initiatives. Key Responsibilities Establish, maintain, and continuously enhance cybersecurity policies, standards, procedures, and governance frameworks and agency-specific security requirements. Ensure compliance with applicable regulatory, contractual, and security requirements throughout the project lifecycle Manage security accreditation activities including VA/PT, Security Assessment Reports and remediation. Oversee security monitoring, incident response, vulnerability management and patch governance. Promote and enforce Secure-by-Design and Security-by-Default principles across systems, applications, cloud platforms, and infrastructure. Ensure security controls are appropriately implemented and maintained throughout the technology stack. Act as primary cybersecurity liaison with Government agencies, auditors, vendors and project stakeholders. Lead, mentor, and develop cybersecurity personnel, fostering a high-performance security culture. Drive cybersecurity awareness, training, and capability-building initiatives across project and operational teams. Provide strategic direction and thought leadership on emerging cybersecurity risks, technologies, and industry trends. Qualifications and Experience Bachelor Degree in Cybersecurity, Information Security, Computer Science or related discipline Minimum 8 years of cybersecurity experience with at least 3-5 years in a leadership role Good to have experience in Singapore public sector projects Demonstrated experience in cybersecurity governance, risk management, compliance, security operations, and security assurance activities Good to have experience with government security requirements Good knowledge of ISO standards (ISO 9001, ISO/IEC 27001, ISO/IEC 12207) Professional certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 Lead Auditor are highly desirable.