Assistant Director - DFIR (Cyber Defence & Resilience)

Synapxe; Queenstown; On-site; NZD 120,000 - 230,000; Full time

Job summary

Synapxe is seeking an Assistant Director to lead the Cybersecurity Incident Response Team, focusing on incident response and digital forensics in the public healthcare sector. You will drive incident management, mentor analysts, and continuously improve playbooks and procedures.

Join a senior leadership role requiring expert investigation skills, MITRE ATT&CK and NIST CSF familiarity, and a strategic mindset to strengthen cyber defenses across the organization.

Qualifications

• Bachelor and/or Master degree in Computer Science, Engineering or equivalent.
• Relevant cybersecurity certifications (e.g., CISSP, GCFE, GREM, GCIA, GCIH, EnCE or similar) required.

Responsibilities

• Strategic planning for cybersecurity technology investments and adoption to strengthen controls.
• Support analysis of alerts and management of cybersecurity incidents with internal and external stakeholders.
• Ensure Incident Management can efficiently analyze and respond to alerts and incidents per procedures and playbooks.
• Lead and drive management of cybersecurity incidents as incident response and digital forensics lead.
• Drive continuous improvement of Incident Response frameworks, playbooks, and SOPs for alerts analysis and incident response.
• Mentor and oversee cybersecurity analysts and digital forensic responders.
• Track and analyse cybersecurity metrics for effectiveness, benchmarking and reporting.

Skills

Incident response

Digital forensics

Threat analysis

Communication

Independent work

MITRE ATT&CK

NIST CSF

Kill chain

Education

Bachelor or Master in CS/Engineering

Job description

Company description

Synapxe is the national HealthTech agency inspiring tomorrow's health. The nexus of HealthTech, we connect people and systems to power a healthier Singapore.

Together with partners, we create intelligent technological solutions to improve the health of millions of people every day, everywhere. Reimagine the future of health together with us at www.synapxe.sg

Job description

Role & Responsibilities

• Strategic planning for investment and/or adoption of cybersecurity technologies to maximize effectiveness of cybersecurity controls against rapidly evolving threats
• Work closely with internal and external stakeholders to support the analysis of alerts and management of cybersecurity incidents
• Ensure that the Incident Management team can efficiently and effectively analyse and respond to alerts and/or incident while following the appropriate procedures and playbooks
• Lead and drive the management of cybersecurity incidents as the cybersecurity incident response and digital forensic manager
• Drive continuous improvement of the Incident Response framework, Cybersecurity Event Management and Incident Response Plan, Standard Operating Procedures and Playbooks for alerts analysis and incident response.
• Drive continuous improvement of the Digital Forensic Standard Operating Procedures.
• Mentor, train and provide oversight for cybersecurity analysts and digital forensic & incident responders
• Track and analyse cybersecurity metrics for optimal effectiveness, benchmarking and management reporting

Requirements

• 10 or more years of experience in security operations especially in the area of cybersecurity incident response and digital forensic
• Experience in conducting detailed investigations and analysis of cyber security alerts
• Strong interpersonal skills with the ability to communicate with internal and external stakeholders including explaining technical concepts to non-technical recipients (technical and non-technical)
• Ability to work independently but proactive in reaching out for support
• Familiarity with the Kill Chain Methodology, MITRE ATT&CK Framework, NIST Cybersecurity Framework (CSF), etc.
• Bachelor and/or Master degree in Computer Science, Engineering or equivalent
• Relevant certifications in cybersecurity, e.g. CISSP, GCFE, GREM, GCIA, GCIH, EnCE or similar

Profile description

Position Overview

This is an Assistant Director position for the Cybersecurity Incident Response Team, which is expected to lead and drive the management of cybersecurity incidents, including but not limited to cybersecurity incident response and digital forensics for the public healthcare. The roles and responsibilities are described in Roles and Responsibilities section.