Assistant Manager, IT & OT Cyber Security

About Sembcorp Sembcorp is a leading energy and urban solutions provider headquartered in Singapore. Led by its purpose to drive energy transition, Sembcorp delivers sustainable energy solutions and urban developments by leveraging its sector expertise and global track record. Purpose and Scope The Assistant Manager, IT & OT Cyber Security supports the implementation and continuous improvement of the Group’s cybersecurity programme across Information Technology (IT) and Operational Technology (OT) environments. The scope includes corporate and business systems, infrastructure, cloud services, industrial control systems, and gas and renewable energy assets. This role works closely with Asset Operations, Engineering, Digital, Application, Infrastructure, and Cybersecurity teams to assess cyber risks, implement and strengthen security controls, monitor compliance, and enhance cyber resilience across IT and OT environments. The incumbent will provide hands-on governance, risk, and assurance support while recognizing the distinct operational, safety, availability, and change-management requirements of each environment. The role contributes to protecting critical systems and supporting the safe, reliable, and efficient operation of the Group’s energy assets. Key Roles and Responsibilities IT & OT Cyber Security Governance & Compliance • Support the implementation of Group IT and OT cybersecurity policies, standards, and procedures across operational assets. • Assist in monitoring compliance with IT & OT cybersecurity requirements and industry standards such as IEC 62443, NIST SP 800-82, and ISO 27001. • Maintain IT & OT cybersecurity documentation, standards, risk registers, and governance materials. • Support audits, assessments, and regulatory reviews covering IT & OT cybersecurity. Cyber Risk Management • Conduct or coordinate cybersecurity risk assessments, control reviews, vulnerability reviews, and security assessments covering IT systems, applications, infrastructure, cloud services, OT systems, and digitalization initiatives. • Track remediation actions, risk-treatment plans, exceptions, and compensating controls, and work with system owners, asset teams, Digital teams, and vendors to address identified gaps.. • Maintain IT and OT asset information, cybersecurity risk registers, critical-system registers, control records, and approved exceptions. • Support security assessments for new projects, major system changes, remote-access solutions, network connectivity, cloud services, and technology deployments. Security Assurance & Asset Support • Partner with asset operations and engineering teams to implement cybersecurity controls and best practices. • Participate in security reviews of IT and OT network architectures, system upgrades, application changes, cloud deployments and infrastructure changes. • Support periodic cybersecurity maturity assessments and compliance reviews across operating sites. • Assist in establishing cybersecurity requirements for new projects and technology deployments through Security by design reviews Incident Response & Monitoring • Support IT & OT cybersecurity incident investigations and coordination activities. • Participate in cybersecurity tabletop exercises, drills, and resilience testing. • Assist in monitoring IT & OT security alerts, vulnerabilities, and emerging cyber threats affecting industrial environments. • Work with cybersecurity operations teams to support threat detection and response activities affecting IT & OT systems. Vendor & Third-Party Security • Support cybersecurity assessments of IT & OT vendors, system integrators, and contractors. • Review third-party remote access arrangements to operational systems. • Assist in ensuring vendors comply with Group cybersecurity requirements during project execution and maintenance activities. Awareness & Capability Development • Support cybersecurity awareness and training programmes for engineering and operations personnel. · Promote cybersecurity best practices across gas and renewable asset teams. • Stay updated on emerging IT & OT cybersecurity threats, technologies, and industry developments. Qualifications and Experience • Bachelor's Degree in Cyber Security, Information Technology, Computer Science, Electrical Engineering, Automation, or a related discipline. • Experience · 3-6 years of experience in cybersecurity, industrial automation, control systems, or related technology roles. • Exposure to OT, ICS, SCADA, DCS, or industrial network environments is preferred. • Experience in energy, utilities, power generation, oil & gas, manufacturing, or critical infrastructure sectors is an advantage. Basic to intermediate understanding of: • Industrial Control Systems (ICS) • SCADA and DCS environments • PLCs, RTUs, and industrial communication protocols • IT & OT network architecture and segmentation principles • Vulnerability management and cybersecurity risk assessment • Secure remote access technologies • Cybersecurity frameworks and standards (IEC 62443, NIST, ISO 27001) Preferred Certifications • ISA/IEC 62443 Fundamentals • GICSP (or pursuing) • Security+ • CISSP Associate • CISM (or pursuing) Competencies • Strong analytical and problem-solving skills. • Good stakeholder management and communication skills. • Ability to work effectively with engineering, operations, and technology teams. • Strong attention to detail and governance mindset. • Willingness to learn IT & OT technologies and industrial cybersecurity practices. • Ability to manage multiple initiatives across geographically dispersed assets. Our Culture at Sembcorp At Sembcorp, our culture is shaped by a strong set of shared behaviours that guide the way we work and uphold our commitment to driving the energy transition. We foster an institution-first mindset, where the success of Sembcorp takes precedence over individual interests. Collaboration is at the heart of what we do, a…