Cybersecurity Operations, Assistant Manager

About Rajah & Tann Singapore LLPThis is an exciting time to join Rajah & Tann Singapore LLP: one of Singapore's largest law firms and is a member of ASEAN's largest network of law firms - Rajah & Tann Asia. We maintain a mature and forward-looking security program and are certified to Singapore's highest tier of cybersecurity certification - Cyber Trustmark (Advocate) as well as ISO 27001:2022. As we pursue a leading position in the responsible adoption of AI within ASEAN's legal sector, you will join a firm where cybersecurity and innovation are strategic priorities. About the RoleAs a Cybersecurity Operations, Assistant Manager, you will help protect the firm by strengthening day-to-day security operations and contributing to strategic security planning. This role combines hands-on responsibility for security tools, alert triage, incident handling and secure configuration with opportunities to improve processes, manage service providers and develop AI-enabled security capabilities.Key ResponsibilitiesSecurity Tool & Platform Operations: Manage and operate security technologies covering vulnerability management, Data Loss Prevention (DLP), Endpoint Detection and Response (EDR), email security, identity security, cloud security, mobile device security, and security orchestration and automation.Autonomous AI Agent Development: Design, build, test and manage AI agents that safely support repeatable security operations tasks, with appropriate oversight and continuous improvement.Service Management: Act as the service manager for external Managed Security Service Providers (MSSPs).Security Alert Triage: Investigate and triage security alerts, including phishing emails, DLP alerts and alerts raised by MSSPs, and coordinate appropriate containment or escalation.Secure Configuration Management: Define and evaluate secure configuration baselines across SaaS, cloud, and on-premises systems.Incident Handling: Respond to and manage security incidents effectively to minimize impact.RequirementsAt least four years of relevant experience in IT, technology operations or cybersecurity.At least two years of hands-on experience in security operations, including alert triage, incident handling, vulnerability management or secure configuration.Experience implementing or operating technical cybersecurity controls across two or more of the following environments: cloud, SaaS and on-premises systems.Ability to assess security risks in the context of business needs, evaluate practical options and recommend proportionate controls.Experience working with internal stakeholders and external service providers, with the ability to coordinate security activities and follow through on issues.Ability to explain security risks and requirements clearly in writing and verbally to technical and non-technical stakeholders.Relevant cybersecurity certifications, such as CISSP, CISM, GIAC, CompTIA Security+ or equivalent, are advantageous but not mandatory.Only shortlisted candidates will be contacted.