Cyber Security Compliance Officer
Job Summary
SMITECH is seeking an experienced Cyber Security & Compliance Officer to manage cyber security matters for a major M&E construction and infrastructure project in Singapore. The role involves developing cybersecurity policies, ensuring regulatory compliance, and liaising with government agencies and stakeholders. The successful candidate will work on-site on a 5.5-day work week basis.
Responsibilities
- Develop and maintain cybersecurity policies and standards.
- Ensure compliance with Singapore regulations and frameworks.
- Conduct risk assessments and manage incident response.
- Liaise with government agencies and external consultants.
- Manage cybersecurity awareness training and audits.
Required Skills
- Degree/Diploma in IT or Cybersecurity.
- 3-5 years of relevant experience.
- Knowledge of government agency compliance.
- Experience in project management and infrastructure environments.
Job Details
Key Responsibilities:
- Develop, implement and maintain the company's cybersecurity policies, standards and procedures.
- Ensure compliance with industry cybersecurity frameworks and applicable Singapore regulations.
- Conduct regular cybersecurity risk assessments and recommend mitigation measures.
- Maintain cybersecurity documentation, policies and audit records.
- Serve as the primary liaison with relevant Singapore government agencies on cybersecurity matters.
- Coordinate cybersecurity submissions, audits and compliance requirements.
- Monitor updates to cybersecurity regulations and advise management on implementation.
- Coordinate cybersecurity improvement projects across the organisation.
- Work closely with external cybersecurity consultants on assessments, penetration testing and implementation projects.
- Track project progress and ensure timely completion of cybersecurity initiatives.
- Monitor cybersecurity alerts, incidents and vulnerabilities.
- Coordinate incident response, investigation and recovery activities.
- Ensure timely remediation of identified security weaknesses.
- Conduct cybersecurity risk assessments for new engineering systems, software and digital solutions.
- Review vendor cybersecurity practices before implementation.
- Support business continuity and disaster recovery planning.
- Develop and conduct cybersecurity awareness programmes for employees.
- Promote cybersecurity best practices throughout the organisation. Coordinate phishing simulations and security training.
- Support internal and external cybersecurity audits.
- Maintain evidence required for compliance reviews.
- Prepare cybersecurity reports and dashboards for management.
Requirements:
- Degree or Diploma in Cybersecurity, Information Security, Computer Science, Information Technology or related discipline.
- Minimum 3-5 years' experience in cybersecurity, information security or IT governance.
- Experience working with government agencies and external cybersecurity consultants.
- Experience managing cybersecurity implementation projects is preferred.
- Experience in an engineering, manufacturing or infrastructure environment is an advantage.