Assistant Manager, IT & OT Cyber Security

Sembcorp is a leading energy and urban solutions provider headquartered in Singapore. Led by its purpose to drive energy transition, Sembcorp delivers sustainable energy solutions and urban developments by leveraging its sector expertise and global track record.

The Assistant Manager, IT & OT Cyber Security supports the implementation and continuous improvement of the Group’s cybersecurity programme across Information Technology (IT) and Operational Technology (OT) environments. The scope includes corporate and business systems, infrastructure, cloud services, industrial control systems, and gas and renewable energy assets.

This role works closely with Asset Operations, Engineering, Digital, Application, Infrastructure, and Cybersecurity teams to assess cyber risks, implement and strengthen security controls, monitor compliance, and enhance cyber resilience across IT and OT environments. The incumbent will provide hand-on governance, risk, and assurance support while recognizing the distinct operational, safety, availability, and change-management requirements of each environment. The role contributes to protecting critical systems and supporting the safe, reliable, and efficient operation of the Group’s energy assets.

• Support the implementation of Group IT and OT cybersecurity policies, standards, and procedures across operational assets.
• Assist in monitoring compliance with IT & OT cybersecurity requirements and industry standards such as IEC 62443, NIST SP 800-82, and ISO 27001.
• Maintain IT & OT cybersecurity documentation, standards, risk registers, and governance materials.
• Support audits, assessments, and regulatory reviews covering IT & OT cybersecurity.

• Conduct or coordinate cybersecurity risk assessments, control reviews, vulnerability reviews, and security assessments covering IT systems, applications, infrastructure, cloud services, OT systems, and digitalization initiatives.
• Track remediation actions, risk-treatment plans, exceptions, and compensating controls, and work with system owners, asset teams, Digital teams, and vendors to address identified gaps.
• Maintain IT and OT asset information, cybersecurity risk registers, critical-system registers, control records, and approved exceptions.
• Support security assessments for new projects, major system changes, remote-access solutions, network connectivity, cloud services, and technology deployments.

• Partner with asset operations and engineering teams to implement cybersecurity controls and best practices.
• Participate in security reviews of IT and OT network architectures, system upgrades, application changes, cloud deployments and infrastructure changes.
• Support periodic cybersecurity maturity assessments and compliance reviews across operating sites.
• Assist in establishing cybersecurity requirements for new projects and technology deployments through Security by design reviews.

• Support IT & OT cybersecurity incident investigations and coordination activities.
• Participate in cybersecurity tabletop exercises, drills, and resilience testing.
• Assist in monitoring IT & OT security alerts, vulnerabilities, and emerging cyber threats affecting industrial environments.
• Work with cybersecurity operations teams to support threat detection and response activities affecting IT & OT systems.

• Support cybersecurity assessments of IT & OT vendors, system integrators, and contractors.
• Review third-party remote access arrangements to operational systems.
• Assist in ensuring vendors comply with Group cybersecurity requirements during project execution and maintenance activities.

• Support cybersecurity awareness and training programmes for engineering and operations personnel.
• Promote cybersecurity best practices across gas and renewable asset teams.
• Stay updated on emerging IT & OT cybersecurity threats, technologies, and industry developments.

• Bachelor's Degree in Cyber Security, Information Technology, Computer Science, Electrical Engineering, Automation, or a related discipline.
• Experience
• 3-6 years of experience in cybersecurity, industrial automation, control systems, or related technology roles.
• Exposure to OT, ICs, SCADA, DCS, or industrial network environments is preferred.
• Experience in energy, utilities, power…