Assistant Director, Information Security

About the jobSPTel is a Singapore-based enterprise telecommunications provider, now fully owned by Seraya Partners. SPTel delivers software-defined, end-to-end digital connectivity powered by nationwide fibre infrastructure, enabling enterprises to provision and manage network services on demand. Our network is known for reliability and diversity because our unique fibre pathways combine leased SP Group infrastructure with owned fibre pipes laid alongside the power network cables. Our network structure also ensures your data takes the shortest possible route for optimal performanceJob OverviewWe are looking for a strong team leader who is passionate about security with at least 8 years of experience in cyber security, GRC and at least 3 years of experience in team lead role.This role oversees enterprise security governance, compliance, infrastructure protection, incident response, and security support for customer-facing services. The successful candidate will lead a team of cybersecurity professionals and collaborate across business units to ensure the company’s information assets and networks remain protected, compliant, and resilient.This rewarding role will best suit someone with network experience and the ability to work closely with our engineers to deliver large scale network security solutions.Experience working with cyber security and in a CII (Critical Information Infrastructure) environment will be an added advantage.Key ResponsibilitiesInfrastructure & Network SecurityOversee the protection of Telco cloud infrastructure and corporate IT network systems. Be responsible for the implementation and management of security-related applications and systems as system owner.Lead to architect, implement, manage and continuously improve security-related systems including but not limited to NGFW, IPS, WAF, Anti-DDoS, AD (Active Directory), TACACS+, PAM, MFA, EDR, EPP/SP, SIEM, ZTNA, and SASE.Develop Standard Operational Procedures (SOP), Manual of Procedures (MOP), and operational documentation for service delivery and change requests.Lead Proof of Concepts (POC) for emerging security technologies and managed security services (MSS).Lead the team as Layer 3 technical support for security-related systems issues, SOC alerts, etc.Governance, Risk & Compliance (GRC)Develop cybersecurity strategy to protect and monitor Corporate IT, Telco Infrastructure and Applications.Manage the roadmap and execution of security certifications (e.g., ISO27001, MTCS), ensuring alignment with business goals and group policies.Lead the establishment, implementation, and continual improvement of the company’s Information Security Management System (ISMS) in alignment with latest ISO/IEC 27001.Develop and maintain the information security policy and a supporting set of specific policies, ensuring appropriate authorization, commitment and endorsement from business management.Ensure the information security policy is enforced and adhered to.Identify and classify information assets and the level of application & data security control and protection required.Conduct annual internal audits and prepare for external audits; perform risk assessments, gap analysis, and compliance reviews.Lead regular internal and third-party VAPT activities, vulnerability assessment and risk management with system owners, ensure the vulnerabilitiesDesign and deliver company-wide cybersecurity awareness programs, including training, phishing simulations, and internal campaigns to foster a culture of security.Customer Cybersecurity SupportEvaluate and respond to customer tenders and cybersecurity inquiries, including infrastructure security compliance, managed security services compliance and data privacy compliance.Support the Sales and Solution teams in addressing supply chain and third-party cybersecurity requirements.Incident Response ManagementLead the company’s response to cybersecurity incidents and threats.Develop and maintain incident response plans, SOC alert playbooks, cyber incident playbooks and conduct annual cyber table-top exercises and/or simulations.Provide incident investigation support to SOC and technical operations teams.Monitoring and managing all security breaches and handling security incidents, taking remedial action to prevent recurrence wherever possible.And other duties as assigned by the HOD.RequirementsTertiary qualification in Cybersecurity, Computer Science, IT / Engineering or equivalent.Minimum 10 years of experience in cybersecurity, with at least 5 years in a leadership or strategic role.Proven track record in managing ISMS and achieving ISO27001 certification.Strong understanding of security architecture across network, infrastructure, and endpoint layers.Experience in stakeholder engagement, internal/external audits, and regulatory compliance.Familiarity with security operations, risk assessments, incident management, and customer cybersecurity support.Professional Certifications such as CISSP, CCSP, CRISC, CISM, ISO 27001 Lead Auditor or equivalent will be an advantage.Key Skills & CompetenciesIn-depth knowledge of security frameworks (ISO27001, MTCS, NIST).Hands-on experience with security technologies (e.g., Firewall, IPS/IDS, WAF, DDoS Protection, AD, PAM, SIEM, EDR, ZTNA).Have experience creating design documents (HLD, LLD) diagrams, and presentationsStrong leadership and team management capabilities.Excellent written and verbal communication skills, including report writing and board-level presentations.Strategic mindset with strong problem-solving and risk mitigation skills.Ability to work cross-functionally with internal teams, auditors, and customers.Enjoy working with different stakeholders to achieve desired outcomes.Ability to work in a fast-pace environment and multi-tasking.