Woh Hup (Private) Limited Hiring! Full Time Deputy Cyber Security Manager in , Earn up to SGD 8,500 - Ricebowl

The Deputy Cyber Security Manager supports the organisation’s cyber security governance, risk management, compliance, security operations, incident response and cyber resilience initiatives across Singapore and Malaysia operations.

This role safeguards information assets, strengthens compliance readiness, manages cyber security technologies and coordinates security improvement initiatives with internal stakeholders, Managed Security Service Providers, vendors and auditors.

Job Responsibilities

Cyber Security Governance & Compliance

Implement and maintain cybersecurity policies, standards, procedures and supporting documentation.

Support compliance with PDPA, CSA Cyber Essentials / Cyber Trust, ISO 27001, NIST Cyber Security Framework and relevant audit requirements.

Conduct security risk and control gap assessments, support internal and external audits, and track remediation actions.

Maintain control registers, risk registers, evidence repositories and management reporting materials.

Security Operations & Incident Response

Manage security monitoring across endpoint, identity, email, network and cloud platforms.

Operate and review alerts from Microsoft Defender XDR, Microsoft Defender for Office 365, Microsoft Sentinel, Darktrace and other security tools.

Coordinate with MSSPs on monitoring, escalation, containment and incident response activities.

Investigate phishing, malware, suspicious activity and account compromise events, including root cause analysis and post-incident reviews.

Prepare cybersecurity threat reports, incident summaries, remediation updates and management dashboards.

Risk, Vulnerability & Third-Party Security

Conduct vulnerability assessments, security posture reviews and risk assessments.

Track vulnerability remediation with infrastructure, application, project site and vendor teams.

Review third-party security risks, vendor due diligence responses and cybersecurity clauses in contracts.

Recommend prioritised mitigation plans and security control enhancements.

Cyber Crisis Readiness & Business Resilience

Support incident response planning, crisis escalation procedures and cyber crisis committee readiness.

Maintain incident response playbooks, contact lists, escalation workflows and war-room materials.

Coordinate tabletop exercises, simulations and lessons-learnt reviews.

Support Business Impact Analysis and the development of ransomware, data breach and crisis communication guidelines.

Security Awareness & Data Protection

Develop and deliver cybersecurity awareness programmes, phishing simulations and follow-up interventions.

Promote secure behaviour, cyber hygiene and responsible data handling across departments and project sites.

Support the Data Protection Officer in privacy controls, incident handling and Data Protection Impact Assessments.

Assist with investigations involving data leakage or suspected breaches and review security requirements for personal data processing.

Project Security & Security Architecture

Review cybersecurity requirements for new IT projects, cloud services, business applications and digitalisation initiatives.

Support cloud, identity, endpoint and network security reviews.

Promote Zero Trust, secure-by-design and least-privilege principles.

Evaluate security technologies and work with business functions to embed cybersecurity controls into processes.

Job Requirements

Degree or Diploma in Cyber Security, Information Technology, Computer Science, Information Systems or a related discipline.

Minimum 5 years of cybersecurity experience, preferably in an enterprise or multi-site environment, including at least 2years in a senior analyst, engineer, lead or supervisory role.

Practical experience in cybersecurity incident management, security operations, audit support, vulnerability management and security improvement projects.

Experience coordinating with MSSPs, vendors, auditors and cross-functional business stakeholders.

Hands-on knowledge of Microsoft Defender XDR, Microsoft Defender for Office 365, Microsoft Sentinel, Microsoft 365 Security& Compliance, identity and access management, endpoint protection, email security and cloud security.

Strong understanding of risk assessments, cybersecurity frameworks, audit evidence preparation, management reporting and data protection controls.

Possess analytical thinking, sound judgement, strong documentation discipline and clear stakeholder communication skills.

Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Lead Auditor, CEH, Security+, SC-200, SC-300, SC-100 or equivalent are preferred.
WOH HUP (PRIVATE) LIMITED

Established in 1927, Woh Hup began humbly as a one-man business in Malaya. Today, we are Singapore’s largest privately owned construction and civil engineering specialist, with a dedicated 1,000-strong workforce, and a body of work spanning many of Singapore’s most notable and iconic developments.

At the heart of our four-generation family-run business lies a proud heritage of industry, integrity and enterprise, focused on creating lasting value for our clients, improving quality and safety standards on every project, and maximising opportunities for our employees to achieve their career potential. These values have fueled the company’s growth consistently for more than 80 years, and continue to do so.

In our efforts to continuously raise the industry bar, we seek to introduce innovative new building solutions and broaden our skills through strategic joint-venture partnerships with overseas counterparts. This has seen us emerge in recent years from being a principal player in the building of private residential and commercial developments, to becoming a leader too in large-scale civil engineering works, cementing our position at the forefront of the construction industry, locally and regionally.