Senior Manager (Cybersecurity)

PSA Group is looking for a strong team player/leader who is passionate about security with at least 10 years of experience in cyber security and around 5-7 years of the cyber security experience in technology architecture, threat intelligence, incident response and forensics, to join their growing group cyber security team.

Beyond an attractive remuneration, you will gain a wealth of diverse experience and exposure especially with the planning/design of future port terminal developments as well as possible stints with our overseas port terminals such as in Europe and Asia.

You will gain exposure in the realm of cutting-edge cyber-physical systems and experience supporting cyber ecosystem risk assessments and security improvements to enable both our future port development and cargo solutions orchestration.

Experience working with cyber security and in a regulated environment will be an added advantage.

Key Job Scope

You will:

• Be responsible, along with other team members, for cybersecurity technology management, cybersecurity engineering, cybersecurity advisories, vulnerability management, event management, incident management as part of overall Group responsibilities across the digital assets of PSA business classes and units including IT, OT, IoT and IIoT.
• Contribute to the development of technological architecture, threat intelligence and incident management standards, procedures and guidelines in alignment with PSA goals and objectives across our digital assets.
• Perform threat intelligence monitoring and watch out for new tactics, techniques and procedures as well as indicators of exposure, attack and compromises in the cyber security space.
• Design and develop timely and actionable vulnerability and threat intelligence advisories to all our business classes and units, provide vulnerability management and remediation oversight.
• Develop and improve incident response plans, coordinate, conduct or participate in incident drills, forensic exercises, table-top exercises and red/purple teaming exercises.
• Perform cybersecurity incident response as part of the larger team, able to provide Level 2 or 3 incident response support on a 24x7 on-call basis.
• Design or deploy technological solutions and architecture for IT, OT and IIoT, and establish demand aggregation and consumption across business classes and units.
• Perform cybersecurity threat modelling on various IT, OT and IIoT architectures, system and network designs and their components.
• Design and implement AI-driven cybersecurity capabilities to optimize threat detection and response, while establishing governance for the secure deployment of internal AI/agentic systems against adversarial AI threats."

Requirements

Job Experience and Competencies in one or more of the following:

• Good experience in incident response and forensics process
• Good experience and knowledge in performing cybersecurity threat modelling
• Designed IT and OT cybersecurity architecture in a maritime, transport or logistics industry
• Conducted cybersecurity vulnerability and threat intelligence analysis, cybersecurity monitoring, cybersecurity event analysis and correlation, incident response and forensics investigation
• Good project management skills, experience in project planning, management and implementation of cybersecurity frameworks (NIST, ISO)
• Prior maritime, logistics or transportation knowledge with international experience would be an advantage

The successful candidate must have some of the following skills, personalities and certifications:

Skills:

• At least Degree in Computer Science or related discipline (Essential)
• At least 10 years of cybersecurity experience (Essential)
• Good knowledge of incident management and forensics procedures (e.g. GCIH, GCIA, GCFA or GREM) (Essential)
• Good knowledge of cybersecurity architectural practices such as TOGAF or SABSA
• Good knowledge of cybersecurity control frameworks pertaining to cybersecurity (e.g. NIST CSF, ISO27001, etc.)
• Good knowledge of OT cybersecurity frameworks and guidelines such as NIST SP800-82 and ISO/IEC 62443
• Good understanding of cybersecurity maturity models such as C2M2, CMMC or CMMI
• Good understanding of threat modelling, MITRE ATT&CK and associated frameworks
• Good understanding of AI for cybersecurity and cybersecurity for AI and the use of agentic

Personalities:

• Strong communication, interpersonal, analytical and problem-solving skills
• Able to work as a team as well as independently
• Willingness to get hands dirty and adopt a growth mindset
• Willingness to accept workload peaks and troughs
• Willingness to travel at short notice
• Good project management skills

Certification:

• GCIH, GCIA, GCFA, GREM, MITRE or equivalent (Essential)
• TOGAF, SABSA or equivalents
• ISA/IEC 62443 or equivalent