Cybersecurity Manager

This is an exciting time to join Rajah & Tann Singapore LLP, one of Singapore's largest law firms and a member of Rajah & Tann Asia, ASEAN's largest regional network of law firms. We maintain a mature and forward-looking cybersecurity programme and are certified under Singapore's highest cybersecurity certification tier, Cyber Trustmark (Advocate), as well as ISO 27001:2022. As part of our continued digital transformation journey, we are exploring opportunities to leverage AI to enhance the way we work and deliver value to our clients.

About the role

Cybersecurity Manager is a hands-on role which helps operate our Information Security Management System (“ISMS”). You will help us to embed cybersecurity into our everyday business processes, assess security controls, and help manage third-party risks.

Key Responsibilities:

• Help maintain and improve firm’s ISMS and compliance to standards.
• Carry out cyber risk assessments in technology projects and keep risk, remediation and action trackers up to date.
• Improve processes and use AI responsibly to make cybersecurity work more efficient and consistent.
• Manage responses to our client’s third-party risk questionnaires from start to finish. Complete due diligence questionnaires, prepare evidence, coordinate stakeholders, lead client walkthroughs and track agreed actions until they close.
• Coordinate internal and external audits and security assessments. Prepare evidence, review controls and track corrective actions until they close.
• Review and update information security policies, standards and procedures.
• Carry out cybersecurity due diligence on third parties and monitor identified supplier risks.
• Develop, test and deliver clear, engaging information security awareness content and communications.
• Prepare reports and documents and carry out administrative work for the Information Security function.
• Help with regional cybersecurity work when needed.

• At least five years of relevant experience in information security, technology risk management, IT governance or IT operations.
• At least two years of experience assessing or managing technology risks in cloud, SaaS or other modern IT environments.
• Experience supporting or operating an Information Security Management System (ISMS) aligned with ISO/IEC 27001, NIST Cybersecurity Framework or an equivalent recognised framework.
• Experience conducting third-party cybersecurity due diligence or managing supplier security risks, including risks associated with cloud services.
• Experience conducting risk assessments, documenting findings and recommending proportionate controls based on organisational and business needs.
• Experience coordinating with technical and non-technical stakeholders, with the ability to communicate security requirements, risk findings and remediation actions clearly in writing and verbally.
• Relevant certifications such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor or equivalent are advantageous but not mandatory.

We regret to inform only shortlisted candidates will be contacted.