Cyber & Operational Risk Governance Manager - Toa Payoh
Cybersecurity isn’t just about policies and frameworks. It’s about keeping the business running smoothly while making sure nothing burns down. That’s where you come in.
Our client needs someone who understands operational cyber governance—not just the theory, but how it works day to day. You’ll be the go-to person ensuring security, compliance, and governance actually work in practice, rather than just ticking boxes.
You'll spend a lot of time working with senior stakeholders, so having a good attitude and the ability to explain things without the tech jargon is key.
What you’ll be doing:
- Making sure IT & OT governance frameworks are up to date and actually useful.
- Helping the CISO build a cybersecurity roadmap that makes sense for the business.
- Keeping IT projects in check—security and governance need to be followed, not ignored.
- Guiding teams on how to manage risks and compliance without overcomplicating things.
- Leading external audits (cybersecurity, regulatory) without breaking a sweat.
- Working closely with regulatory agencies—you’ll be the one making sure everything stays above board.
- Building and improving the risk management framework so it works for real-world operations.
What you’ll need:
- 5+ years of experience in cybersecurity governance, risk, or compliance.
- Hands-on attitude—this isn’t a sit-back-and-observe role.
- Confidence to deal with senior leaders and explain things clearly.
- Strong knowledge of IT governance, risk, and security frameworks (ISO 27001, IEC 62443, NIST).
- A solid understanding of cybersecurity regulations—you’ll be the one keeping things compliant.
Bonus points if you have:
- A degree in Computer Science, Engineering, or something similar.
- Project management certs (PMP, PRINCE2, CAPM) – useful but not essential.
- Security certs like CISM, CISA, CISSP, CGEIT, CRISC – nice to have, but we’re more interested in what you can do.
This role is for someone who thrives in operations, understands cybersecurity beyond theory, and enjoys working with people at all levels.
If that sounds like you, let’s talk.