Cybersecurity Manager

About This Role

This night-shift post on the cardiac ward pairs patient care with mentoring new nurses. The Cybersecurity Manager is a hands-on role that helps operate the firm's Information Security Management System (ISMS). You will embed cybersecurity into everyday business processes, assess security controls, and manage third-party risks.

Responsibilities

• Help maintain and improve the firm’s ISMS and compliance to standards
• Carry out cyber risk assessments in technology projects and keep risk, remediation, and action trackers up to date
• Improve processes and use AI responsibly to make cybersecurity work more efficient and consistent
• Manage responses to client’s third-party risk questionnaires from start to finish, including completing due diligence questionnaires, preparing evidence, coordinating stakeholders, leading client walkthroughs, and tracking agreed actions until they close
• Coordinate internal and external audits and security assessments, including preparing evidence, reviewing controls, and tracking corrective actions until they close
• Review and update information security policies, standards, and procedures
• Carry out cybersecurity due diligence on third parties and monitor identified supplier risks
• Develop, test, and deliver clear, engaging information security awareness content and communications
• Prepare reports and documents and carry out administrative work for the Information Security function
• Help with regional cybersecurity work when needed

Requirements

• At least five years of relevant experience in information security, technology risk management, IT governance, or IT operations
• At least two years of experience assessing or managing technology risks in cloud, SaaS, or other modern IT environments
• Experience supporting or operating an Information Security Management System (ISMS) aligned with ISO/IEC 27001, NIST Cybersecurity Framework, or an equivalent recognized framework
• Experience conducting third-party cybersecurity due diligence or managing supplier security risks, including risks associated with cloud services
• Experience conducting risk assessments, documenting findings, and recommending proportionate controls based on organizational and business needs
• Experience coordinating with technical and non-technical stakeholders, with the ability to communicate security requirements, risk findings, and remediation actions clearly in writing and verbally

Nice to have:

• Relevant certifications such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor or equivalent

About the Company

Rajah & Tann Singapore LLP is one of Singapore's largest law firms and a member of Rajah & Tann Asia, ASEAN's largest regional network of law firms. The firm maintains a mature and forward-looking cybersecurity program and is certified under Singapore's highest cybersecurity certification tier, Cyber Trustmark (Advocate), as well as ISO 27001:2022. As part of its continued digital transformation journey, the firm is exploring opportunities to leverage AI to enhance the way it works and delivers value to clients.