IT Security Manager - IT Security

About Us

Headquartered and listed in Singapore in 2021, CapitaLand Investment Limited (CLI) is a leading global real asset manager with a strong Asia foothold.  As at 5 November 2025, CLI had S$120 billion of funds under management. CLI holds stakes in eight listed real estate investment trusts and a suite of private real asset vehicles that invest in demographics, disruption and digitalisation-theme strategies. Its diversified real asset classes include retail, office, lodging, industrial, logistics, business parks, wellness, self-storage, data centres and private credit.

Job Description

The Manager, IT Security is responsible for driving cybersecurity governance, risk management, compliance, policy management, OT security governance and security awareness initiatives across the Group. The role works closely with business, technology, property operations and external stakeholders to strengthen cybersecurity posture, manage cyber risks, support regulatory compliance and ensure effective implementation of security controls.

Responsibilities:

• Lead and manage cybersecurity governance, risk and compliance (GRC) activities across the organization.
• Develop, maintain and enhance cybersecurity policies, standards, procedures and guidelines aligned with business and regulatory requirements.
• Lead security architecture reviews for infrastructure, cloud, network, endpoint, application, data and digital transformation initiatives.
• Drive compliance with applicable regulations and frameworks such as PDPA, PCI DSS, ISO 27001, NIST Cybersecurity Framework and other relevant requirements.
• Manage cybersecurity risk assessments and maintain the enterprise cyber risk register, including tracking of risk mitigation plans.
• Coordinate internal and external audits, assessments and compliance reviews, and drive remediation of identified findings.
• Oversee third-party cybersecurity risk assessments and work with vendors to address identified security gaps.
• Establish and maintain OT and IoT cybersecurity governance frameworks for smart building, property technology and operational technology environments.
• Conduct OT cybersecurity risk assessments and work with business stakeholders to improve security controls for OT systems.
• Partner with enterprise architecture, infrastructure and application teams to integrate cybersecurity requirements into technology initiatives.
• Manage and coordinate cybersecurity projects and initiatives as assigned.
• Collaborate with regional teams, including counterparts in China, to drive consistent cybersecurity governance practices

Requirements:

• Degree in Information Security, Computer Science, Information Technology or related discipline.
• Minimum 5-8 years of relevant experience in cybersecurity, information security, governance, risk and compliance, or technology risk management.
• Strong understanding of cybersecurity frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, PCI DSS and PDPA.
• Experience in cybersecurity governance, risk assessments, audit management and policy development.
• Knowledge of OT/IoT cybersecurity concepts, smart building technologies and industrial control environments would be advantageous.
• Experience managing cybersecurity initiatives across complex enterprise environments.
• Relevant professional certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer or Lead Auditor are preferred.
• Strong stakeholder management, communication and presentation skills.
• Experience working with multiple business units and regional stakeholders.
• Ability to work independently while effectively managing multiple priorities and deadlines.

Benefits

• Flexible benefits with comprehensive medical coverage for self and family
• Training and development opportunities
• Subsidised rates at Ascott serviced residences-
• Strong advocate of staff volunteerism
• Wellness programmes

At CapitaLand, we advocate fair employment practices, and recruit talents based on merit and fit with our Corporate values. We provide equal opportunity for all qualified persons and build an inclusive workplace regardless of race, gender, age, religious belief or nationality.

Only shortlisted candidates will be notified.