Information Security Manager (Consumer)

Location: Singapore

Industry: Consumer / Retail

Our client is seeking an experienced Information Security Manager to lead and own all aspects of cybersecurity across the organisation. This is a standalone security role and will serve as the primary point of contact for all information security, cyber risk and incident management activities. The successful candidate will work closely with business leaders, IT teams and external partners to strengthen the organisation's security posture while supporting business growth in a fast-paced consumer and retail environment.

• Act as the sole owner and subject matter expert for Information Security across the organisation.

• Lead and manage security incidents, including investigation, containment, eradication, recovery and post-incident reviews.

• Develop and maintain incident response plans, playbooks and crisis management procedures.

• Coordinate with internal stakeholders, external vendors and regulatory bodies during cybersecurity incidents.

• Conduct root cause analysis and drive remediation efforts following security incidents.

• Establish and maintain security policies, standards, procedures and governance frameworks.

• Identify, assess and manage cybersecurity risks across retail stores, corporate offices, e-commerce platforms and supporting infrastructure.

• Oversee vulnerability management, security monitoring and remediation activities.

• Drive security awareness and training programmes across the business.

• Support compliance initiatives and security audits.

• Review security architecture, technology implementations and third-party vendor risks.

• Provide regular security risk and performance updates to senior management.

• Develop and execute the organisation's cybersecurity roadmap aligned with business objectives.

• Bachelor's degree in Information Security, Cybersecurity, Computer Science or a related discipline.

• Minimum 5 years of Information Security experience, preferably within consumer, retail, FMCG or customer-facing environments.

• Proven hands-on experience leading and managing cybersecurity incidents is a mandatory requirement.

• Strong knowledge of incident response, threat management, vulnerability management and security operations.

• Experience developing security policies, governance frameworks and risk management programmes.

• Familiarity with security technologies such as SIEM, EDR, IAM, email security and cloud security solutions.

• Experience managing third-party security risks and external vendors.

• Good understanding of regulatory and compliance requirements relevant to consumer and retail businesses.

• Ability to operate independently and be accountable as the sole security lead within the organisation.

• Strong stakeholder management and communication skills, with the ability to engage both technical and non-technical audiences.

• Professional certifications such as CISSP, CISM, GIAC, GSEC, ISO27001 or equivalent.

• Experience supporting cloud-hosted environments and digital commerce platforms.

• Prior experience building or maturing cybersecurity programmes in lean teams or standalone security functions.

• Highly autonomous and comfortable operating as a one-person security function.

• Strong ownership mentality with a hands-on approach to problem solving.

• Calm and decisive during security incidents and crisis situations.

• Commercially aware, pragmatic and able to balance security requirements with business needs.

• Confident working with senior leadership and influencing security-related decisions across the organisation.