Overview
Manager/Senior Manager, Information Security (InfoSec) Jobs in Singapore, Singapore at Rockstead Capital
Title: Manager/Senior Manager, Information Security (InfoSec)
Company: Rockstead Capital
Location: Singapore, Singapore
About Us
Rockstead Capital was established in 2005. We believe in building long-term relationships, aligning to our clients' interests, and protecting the trust placed in us. By providing bespoke asset management and legacy planning services to individuals and families, we protect and grow their wealth. We are a Licensed Fund Management Company (LFMC) under the regime of Monetary Authority of Singapore (MAS).
Job Overview
We are seeking a dynamic and skilled Information Security (InfoSec) Manager/Senior Manager to join our team. You will serve as the organisation's primary owner of information security strategy, infrastructure, and regulatory compliance — with particular emphasis on our IT transformation journey and adherence to the MAS Technology Risk Management (TRM) Guidelines. This is a foundational, high-impact hire with broad mandate and direct leadership visibility.
Key Responsibilities
- Lead the Company’s IT governance and security through transformation initiatives, including cloud migration, digital infrastructure, and enterprise systems adoption.
- Serve as the subject matter expert on MAS TRM compliance, conducting gap assessments, risk reviews, and ensuring timely remediation of technology risk findings.
- Establish and enforce IT policies, standards, and procedures across the organisation covering access management, data classification, network security, endpoint protection, and incident response.
- Own the Incident Response and IT Business Continuity Planning (BCP/DRP) frameworks; lead tabletop exercises and coordinate breach response when required.
- Manage IT vendor and third-party risk assessments for any critical IT services as per required by the Company.
- Build internal IT security awareness programmes and drive a culture of IT security across all staff levels.
Key Competencies
- Minimum 8 years of progressive experience in information security, cybersecurity, or technology risk management roles.
- Demonstrated working knowledge of the MAS Technology Risk Management (TRM) Guidelines; prior experience in a regulated financial institution or adjacent sector is strongly preferred.
- Proven track record designing and implementing security frameworks (ISO 27001, NIST CSF, or equivalent) in an enterprise or mid-market context.
- Strong understanding of cloud security architecture (AWS, Azure, or GCP) and hybrid infrastructure environments.
- Excellent stakeholder communication skills — able to translate technical risk into business language for senior management and Board-level audiences.
