{"id":2096233,"url":"https://alion.io/job/sj-group-cybersecurity-ops-and-infrastructure-security-manager","title":"Cybersecurity Ops and Infrastructure Security Manager","company":{"id":2045194,"name":"SJ Group","domain":"sjgroup.com","url":"https://alion.io/company/sjgroup","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":48,"ghost_share":0,"stale_share":0.792,"repost_share":0,"time_to_fill_p50_days":38,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":113000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":41},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"IBM QRadar","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-10-08T16:53:54Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-22T17:51:56Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"The Cybersecurity Ops and Cloud Security Manager is responsible for establishing, managing, and continuously enhancing the organisation’s cybersecurity operations capability, with a focus on cloud environments, IoT platforms, and smart facility management systems.\nThe role ensures that the organisation maintains operational readiness to detect, respond to, and recover from cybersecurity incidents, and that all systems comply with ISO/IEC 27001 and related standards.\nThis position is critical in mitigating cybersecurity risks across ongoing digital and smart infrastructure projects, where the absence of in house operational expertise would expose the organisation to significant vulnerabilities. The role will work closely with internal teams, vendors, and stakeholders to ensure that smart facility solutions are resilient, compliant, and aligned with organisational cybersecurity standards.\nRoles & Responsibilities:\nA. Cybersecurity Operations & Incident Management\nEstablish and manage end-to-end cybersecurity operations, including monitoring, detection, incident response, and recovery.\n\nDevelop, implement, and maintain a Cybersecurity Incident Response Plan (CIRP) in accordance with ISO/IEC 27035.\n\nLead and coordinate responses to cybersecurity incidents affecting cloud platforms, IoT systems, and smart facility infrastructure.\n\nEnsure timely incident triage, containment, eradication, and post-incident reviews (lessons learned).\n\nConduct regular incident response drills and tabletop exercises to ensure organisational preparedness.\n\nB. ISO 27001 Compliance & Security Operations Governance\nEstablish and maintain an Information Security Management System (ISMS) aligned with ISO/IEC 27001.\n\nOperationalise ISO controls, including but not limited to:\nA.5 Information Security Policies\n\nA.8 Asset Management\n\nA.12 Operations Security\n\nA.13 Communications Security\n\nA.16 Incident Management\n\nEnsure all cybersecurity operations processes are documented, audited, and continuously improved.\n\nLead internal and external audits, risk assessments, and compliance reviews.\n\nMaintain risk registers, treatment plans, and security KPIs for management reporting.\n\nC. Cloud Security Management\nDefine and enforce cloud security policies across platforms (e.g. Azure, AWS, Google Cloud).\n\nImplement and manage:\nIdentity and Access Management (IAM)\n\nSecurity monitoring and logging (SIEM/SOAR)\n\nData protection controls (encryption, DLP)\n\nSecure configuration and posture management (CSPM)\n\nEnsure secure integration between cloud systems and on-premise / IoT environments.\n\nConduct cloud security assessments and remediation tracking.\n\nD. IoT & Smart Facility Security Operations\nOversee operational security of IoT devices, smart building systems, and facility management platforms.\n\nMonitor vulnerabilities across OT and IoT ecosystems, including BMS, SCADA, and sensor networks.\n\nImplement network segmentation and zero-trust principles across IT/OT convergence environments.\n\nEstablish patch management, firmware updates, and lifecycle controls for connected devices.\n\nE. Threat Monitoring & Vulnerability Management\nEstablish continuous monitoring capabilities using SIEM/SOC tools.\n\nLead vulnerability scanning, penetration testing coordination, and remediation tracking.\n\nIntegrate threat intelligence into operational processes to proactively identify risks.\n\nF. Stakeholder Management & Reporting\nServe as the primary POC for cybersecurity operations across projects and business units.\n\nProvide regular reporting to senior management on:\nSecurity posture;\n\nIncident trends and response performance;\n\nCompliance status and key risks.\n\nEngage vendors, managed security service providers, and auditors to ensure security requirements are met.\n\nEducation Qualification\nDegree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related discipline.\nRelevant Experience\nMinimum 8-10 years’ experience in IT cybersecurity, with at least:\n5 years in security operations / SOC / incident response, and\n\nProven experience in cloud security management and ISO 27001 implementation.\n\nHands-on experience managing cybersecurity operations in environments involving IoT, OT, or smart infrastructure systems is highly desirable.\nProfessional Accreditations\n(Preferred)\nCISSP, CISM, or CISA\n\nGIAC, CEH, or equivalent cybersecurity certification\n\nCloud security certification (e.g. CCSP, AWS/Azure Security)\n\nOT / ICS security certification (advantageous)\n\n Professional Knowledge/ Skills\nProven track record in cybersecurity risk assessment, architecture review, and secure system implementation.\n\nExperience working in complex, multi-vendor digital or smart infrastructure projects is highly desirable.\n\nStrong practical knowledge of:\n\nSecurity Operations Centre (SOC) tools and processes\n\nSIEM / SOAR platforms (e.g. Splunk, Sentinel, QRadar)\n\nCloud security architectures and controls\n\nIncident response frameworks and playbooks\n\nDeep understanding of ISO standards:\n\nISO/IEC 27001 (ISMS)\n\nISO/IEC 27002 (Security Controls)\n\nISO/IEC 27035 (Incident Management)\n\nFamiliarity with:\n\nNIST Cybersecurity Framework\n\nIEC 62443 (OT security)\n\nZero Trust Architecture principles\n\nAbility to translate technical cybersecurity risks into clear business and operational implications.\n\nHigh level of professionalism, integrity, and attention to detail.\n\nAt Surbana Jurong, we put talent, hard work, teamwork and a fun workplace together to approach problems and solve them creatively and collaboratively. Join us in making a positive impact on the world!","description_format":"text","description_chars":5574,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Architecture","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-08T16:53:54Z"}],"visa":[],"liveness":{"score":55,"band":"ok","label":"Likely open","p_open":1,"p_active":0.612,"p_room":0.9,"age_days":13,"expected_fill_days":38,"reasons":["conf:23","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/sj-group-cybersecurity-ops-and-infrastructure-security-manager","json_url":"https://alion.io/job/sj-group-cybersecurity-ops-and-infrastructure-security-manager.json","meta":{"generated_at":"2026-10-22T19:48:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3325,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2045194},"rest":"https://alion.io/mcp/rest/get_company?id=2045194"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsj-group-cybersecurity-ops-and-infrastructure-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsj-group-cybersecurity-ops-and-infrastructure-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsj-group-cybersecurity-ops-and-infrastructure-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sj-group-cybersecurity-ops-and-infrastructure-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsj-group-cybersecurity-ops-and-infrastructure-security-manager"}]}