# Cybersecurity Manager

> Rajah & Tann Singapore LLP · Singapore, Singapore (Hybrid) · Full-time · Posted 2026-10-21

**Workplace:** hybrid

**Department:** Centralised Services

## Description

This is an exciting time to join Rajah & Tann Singapore LLP, one of Singapore's largest law firms and a member of Rajah & Tann Asia, ASEAN's largest regional network of law firms. We maintain a mature and forward-looking cybersecurity programme and are certified under Singapore's highest cybersecurity certification tier, Cyber Trustmark (Advocate), as well as ISO 27001:2022. As part of our continued digital transformation journey, we are exploring opportunities to leverage AI to enhance the way we work and deliver value to our clients.

**About the role**

Cybersecurity Manager is a hands-on role which helps operate our Information Security Management System (“ISMS”). You will help us to embed cybersecurity into our everyday business processes, assess security controls, and help manage third-party risks. 

**Key Responsibilities:**

-   Help maintain and improve firm’s ISMS and compliance to standards.
-   Carry out cyber risk assessments in technology projects and keep risk, remediation and action trackers up to date.
-   Improve processes and use AI responsibly to make cybersecurity work more efficient and consistent.
-   Manage responses to our client’s third-party risk questionnaires from start to finish. Complete due diligence questionnaires, prepare evidence, coordinate stakeholders, lead client walkthroughs and track agreed actions until they close.
-   Coordinate internal and external audits and security assessments. Prepare evidence, review controls and track corrective actions until they close.
-   Review and update information security policies, standards and procedures.
-   Carry out cybersecurity due diligence on third parties and monitor identified supplier risks.
-   Develop, test and deliver clear, engaging information security awareness content and communications.
-   Prepare reports and documents and carry out administrative work for the Information Security function.
-   Help with regional cybersecurity work when needed.

## Requirements

-   At least five years of relevant experience in information security, technology risk management, IT governance or IT operations.
-   At least two years of experience assessing or managing technology risks in cloud, SaaS or other modern IT environments.
-   Experience supporting or operating an Information Security Management System (ISMS) aligned with ISO/IEC 27001, NIST Cybersecurity Framework or an equivalent recognised framework.
-   Experience conducting third-party cybersecurity due diligence or managing supplier security risks, including risks associated with cloud services.
-   Experience conducting risk assessments, documenting findings and recommending proportionate controls based on organisational and business needs.
-   Experience coordinating with technical and non-technical stakeholders, with the ability to communicate security requirements, risk findings and remediation actions clearly in writing and verbally.
-   Relevant certifications such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor or equivalent are advantageous but not mandatory.

_We regret to inform only shortlisted candidates will be contacted._

## Apply

[Apply at Rajah & Tann Singapore LLP](https://apply.workable.com/rajah-tann/j/E4AEC6B710/apply)

---
Powered by [Workable](https://www.workable.com)