Manager, Cybersecurity
Job Summary:
We seek an experienced professional to design, implement, and oversee our cybersecurity program across hybrid (cloud and on‑premises) environments in a semiconductor manufacturing facility. The role requires strong expertise in Microsoft security (MDE, MDM), SOC operations, SOX IT compliance, and Singapore regulations.
Key Responsibilities
- Design, implement, and govern security controls across hybrid environments, including Microsoft 365, Azure/AWS, on-premises infrastructure, and manufacturing OT networks.
- Oversee Microsoft Defender for Endpoint (MDE), Intune/MDM, and endpoint protection programs to ensure secure device management, threat detection, and compliance across corporate, contractor, and BYOD devices.
- Lead SOC monitoring, SIEM/SOAR operations, threat intelligence integration, incident response, threat hunting, and continuous improvement of detection and response capabilities.
- Establish and maintain IT General Controls (ITGCs), manage audit preparation and remediation activities and ensure ongoing compliance through continuous monitoring and reporting.
- Develop and maintain security policies, standards, and risk management frameworks aligned with PDPA, Singapore Cybersecurity Act, CSA guidelines, and other applicable regulatory requirements.
- Partner with Engineering, OT, and Supply Chain teams to protect semiconductor manufacturing systems, intellectual property, EDA tools, MES platforms, and vendor remote access channels while maintaining operational uptime.
- Lead security initiatives, vendor risk management, executive reporting, security awareness programs, and strategic roadmap development to strengthen the organization's overall cybersecurity posture.
Qualifications &Requirements
- Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, with at least 7 years of cybersecurity experience, including 3 years in a leadership or managerial role.
- Proven hands-on experience securing hybrid cloud and on-premises environments, with strong knowledge of Microsoft security technologies including Defender for Endpoint, Intune, Microsoft Sentinel, Entra ID, and Purview.
- Demonstrated experience leading or managing SOC operations, SIEM/SOAR platforms, threat hunting programs, incident response, and cybersecurity monitoring functions.
- Strong understanding of SOX ITGC requirements, audit processes, risk management, and Singapore cybersecurity and data protection regulations, including PDPA and the Cybersecurity Act.
- Relevant certifications such as CISSP, CISM, CCSP, Microsoft Security certifications, or ISO 27001 Lead Implementer/Auditor preferred, with excellent stakeholder management, communication, and executive reporting capabilities