About the role
The Manager, Compliance will lead SMRT's cybersecurity governance, risk and compliance initiatives, ensuring policies, standards and controls are effectively implemented, managing compliance programs, driving awareness training, and reporting to senior stakeholders.
TransportOnsite
Key Responsibilities
- Manage, plan and execute cybersecurity compliance activities to assess control effectiveness, identify gaps and recommend remediation
- Monitor, assess and report cybersecurity maturity levels against industry standards and regulatory expectations
- Coordinate internal cybersecurity compliance across business units and systems
- Investigate compliance violations or control weaknesses and work with stakeholders on root cause analysis and corrective actions
- Design and deliver cybersecurity awareness initiatives and training programmes
- Engage with stakeholders and senior management to communicate cybersecurity posture and risk exposure
Requirements
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science or a related discipline
- 5–10 years of experience in cybersecurity governance, audit, risk management or compliance
- Familiarity with frameworks such as NIST CSF, ISO/IEC 27001 and CIS Controls
- Experience conducting risk assessments
- Knowledge of regulatory requirements including Cybersecurity Code of Practice (CCoP) and Personal Data Protection Act (PDPA)