Senior Manager – Cyber Security

How does this Job align to our Strategy?
This role aligns with TCPL’s strategic pillar of Drive Digital and Innovation and Create Future Ready Organisation by strengthening enterprise cybersecurity governance, risk management, assurance and resilience. The role enables secure digital transformation, protects critical business assets, supports regulatory compliance and provides leadership-level visibility on cyber risks and control effectiveness.
What are the Key Deliverables in this role?
Financial Outcomes
🌟Support risk-based cybersecurity investment decisions by providing visibility on cyber risks, maturity gaps and control priorities.
🌟Drive governance over cybersecurity programs to ensure timely delivery, value realization and effective utilization of security investments.
🌟Reduce potential financial exposure from cyber incidents, audit gaps, regulatory non-compliance and third-party security failures.
Customer Service
🌟Enable secure and trusted digital services for internal and external stakeholders through effective cybersecurity governance.
🌟Partner with business, IT and digital teams to embed cybersecurity requirements into business and technology initiatives.
🌟Provide timely cyber risk insights, governance inputs and recommendations to support leadership decision-making.
Internal Processes
🌟Lead the enterprise Cyber Security Governance and Risk Management program, including frameworks, policies, standards and procedures.
🌟Drive development and execution of the Cyber Security Strategy and multi-year security roadmap.
🌟Establish cyber risk identification, assessment, treatment, acceptance, monitoring and executive reporting mechanisms.
🌟Drive cybersecurity maturity assessments using frameworks such as ISO 27001, NIST CSF and relevant regulatory expectations.
🌟Establish and monitor cyber KPIs, KRIs, dashboards and management reporting for governance forums.
🌟Provide governance oversight across IAM/PAM, vulnerability management, endpoint security, cloud security, application security, data protection, SOC/SIEM and incident management.
🌟Lead third-party cybersecurity risk management, audit coordination, compliance reviews and remediation tracking.
🌟Support cyber incident governance, post-incident reviews, business continuity, disaster recovery and cyber resilience initiatives.
🌟Lead AI Governance and AI Risk Management, including responsible AI controls, AI risk assessments
Innovation and Learning
🌟Drive continuous improvement of cybersecurity governance, assurance and risk management processes.
🌟Promote automation and data-driven reporting for cyber risk, compliance, KPIs and maturity tracking.
🌟Lead adoption of emerging governance practices in AI security, digital risk, cyber resilience and regulatory compliance.
🌟Mentor and develop cybersecurity governance team members and service-provider resources.
What are the Critical success factors for the Role?
🌟Strong experience in cybersecurity governance, risk management, assurance and compliance.
🌟Ability to translate technical cyber risks into business impact and executive-level insights.
🌟Strong knowledge of ISO 27001, NIST CSF, cyber risk management and enterprise security controls.
🌟Experience in managing cyber audits, regulatory assessments, risk registers and remediation programs.
🌟Strong stakeholder management skills across IT, business, digital, privacy, legal, risk and audit teams.
🌟Ability to lead cybersecurity programs, governance forums, service providers and cross-functional initiatives.
🌟Strong written and verbal communication skills for management and executive reporting. Mandatory Language Requirements (spoken), if any: English
What are the Desirable success factors for the Role?
🌟Experience in AI Governance, ISO 42001, privacy, business continuity and cyber resilience.
🌟Exposure to third-party risk management, security metrics automation and GRC platforms.
🌟Certifications such as CISM, CRISC, ISO 27001 Lead Auditor / Lead Implementer, or ISO 42001 preferred.
🌟Experience in large, distributed or consumer-focused enterprises would be an advantage.

Work arrangement
No