Cybersecurity Manager

About the Company

Responsibilities

• ● Monitor and manage enterprise security tools to identify, investigate, and respond to security threats
• ● Lead incident response, vulnerability management, and remediation activities with internal teams and vendors
• ● Review the security posture of systems and applications, ensuring timely patching and risk mitigation
• ● Lead penetration testing, cybersecurity assessments, and risk reviews
• ● Develop, maintain, and enhance cybersecurity policies, standards, and procedures
• ● Drive compliance with the Personal Data Protection Act (PDPA) and other applicable security and privacy regulations
• ● Lead the organisation's Cyber Trust Mark certification and other security audit initiatives
• ● Champion a strong cybersecurity culture through phishing simulations, awareness campaigns, and employee training
• ● Develop regular security reports and dashboards to provide management with insights into cybersecurity risks and initiatives
• ● Partner with the Data Protection Officer (DPO) to strengthen privacy governance and secure data handling practices
• ● Support privacy impact assessments, regulatory reviews, audits, and policy development
• ● Promote best practices for data protection across business functions
• ● Lead cybersecurity projects, including the implementation of new security technologies and compliance initiatives
• ● Assess third-party security risks and work with vendors to ensure appropriate security controls are in place
• ● Contribute to the Group's cybersecurity roadmap and long-term technology strategy

Requirements

• ● Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related discipline
• ● Proven experience in cybersecurity, information security, or IT risk management
• ● Experience leading security operations, incident response, vulnerability management, and security governance initiatives
• ● Strong understanding of cybersecurity frameworks, risk management, and data protection regulations such as PDPA
• ● Experience managing penetration testing, security audits, and compliance programmes
• ● Familiarity with enterprise security technologies, endpoint protection, email security, and vulnerability management platforms
• ● Relevant cybersecurity certifications (e.g. CISSP, CISM, CEH, Security+, ISO 27001) will be an advantage
• ● Project management certification (e.g. PMP or PRINCE2) is beneficial
• ● A strategic thinker who enjoys balancing governance with practical implementation
• ● Calm and decisive when responding to security incidents and emerging risks
• ● Strong analytical and problem-solving skills with excellent attention to detail
• ● An effective communicator who can translate technical concepts for business stakeholders
• ● A collaborative leader who builds strong relationships across technical and non-technical teams
• ● Passionate about fostering a security-first culture and driving continuous improvement

Benefits

• ● Lead cybersecurity initiatives that protect a regional business and its customers
• ● Drive security strategy, governance, and regulatory compliance across the Group
• ● Work alongside business leaders and technology teams on meaningful transformation initiatives
• ● Be part of a collaborative environment that values innovation, continuous learning, and operational excellence