SMO System Manager - Systems Mgt Office, Compliance Ops

Job Description

NCS is looking for a strong SMO System Manager for Governance & Compliance, IT Security & Compliance to lead service governance, IT security compliance, and risk management for a Defence client environment.

This is a client-facing role that sits at the intersection of service management, cybersecurity governance, compliance, and operational security assurance. The successful candidate will work closely with project teams, client stakeholders, auditors, agency security teams, internal delivery teams, and Partners to ensure services are secure, compliant, well-governed, and operationally resilient.

Key Responsibilities

• Lead governance, risk, and compliance activities across the project team and service environment.
• Oversee IT Security and Compliance matters, including security controls, compliance tracking, audit readiness, remediation follow-up, and risk reporting.
• Manage service management governance across incident, problem, change, release, configuration, and service continuity management processes.
• Serve as the key point of contact for security incident-related matters within the project team, ensuring timely coordination, escalation, reporting, and closure.
• Review, assess, and provide guidance on security and compliance artefacts, including government security submissions, risk papers, control documents, and clearance papers.
• Support the review and coordination of CSA Tier 1 and Generic Host Template (GHT) papers where applicable.
• Engage stakeholders on topics such as risk, governance, compliance, IT security, vulnerabilities, control gaps, audit findings, and remediation plans.
• Drive compliance with relevant policies, standards, and frameworks, including ITIL, IM8, CIS Controls, ISO 27001, and other applicable government security requirements.
• Monitor and track vulnerabilities, including CVE and known exploited vulnerability exposure, and coordinate remediation with technical teams.
• Work with delivery teams to ensure service risks and security issues are properly assessed, documented, prioritised, and resolved.
• Prepare governance reports, compliance updates, risk registers, audit responses, and management-level summaries for client and internal stakeholders.
• Promote a strong culture of service discipline, security awareness, accountability, and continuous improvement across the project team.

Qualifications

• Strong experience in IT service management, cybersecurity governance, IT security compliance, risk management, or audit coordination.
• Prior experience supporting Defence, Public Service, or government-regulated environments is highly preferred.
• Good understanding of ITIL-based service management processes, including incident, problem, change, release, configuration, and service continuity management.
• Strong working knowledge of security governance, compliance controls, vulnerability management, audit readiness, and risk remediation.
• Familiarity with IM8, CIS Controls, ISO 27001, CVE tracking, and known exploited vulnerability management.
• Able to engage confidently with diverse stakeholders, including client teams, auditors, agency security representatives, project teams, technical teams, and Partners.
• Strong writing and review skills for governance papers, compliance documentation, audit responses, and risk submissions.
• Comfortable deep diving into complex governance, security, and compliance topics while keeping stakeholders aligned on practical outcomes.
• Experience with CSA Tier 1, GHT papers, or other government/security clearance papers will be an advantage.
• Knowledge of CSA Cloud Controls Matrix is optional but beneficial.

Preferred Certifications

• CISSP, CISA, or CISM preferred.
• ITIL 4 or ITIL 5 certification preferred.
• ISO 27001 Lead Implementer / Implementer certification is good to have.

Ideal Candidate Profile

You are a structured, client-facing service and security governance professional who can connect policy, process, risk, and operations. You are comfortable working with technical teams and non-technical stakeholders, and you can translate security and compliance requirements into clear actions that support secure and reliable service delivery. This is a Day 2 role.

Additional Information

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.

Scam Alert

We are aware of fraudulent job offers and impersonations of NCS recruiters. Phishing emails using convincing-looking but fake addresses are also commonly used to trick you into thinking that they come from official NCS sources.

Please note that all official communications from NCS Group will only be sent from verified corporate email addresses. Always check that the sender’s email address ends with the genuine NCS domain, @ncs.com.sg/ @ncs.co and beware of extra letters, symbols or misspellings. When in doubt, verify the sender’s identity by contacting us at [email protected].