Assistant Director (Cybersecurity Services)

Civil Aviation Authority Of Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Civil Aviation Authority of Singapore is seeking a senior cybersecurity professional to strengthen our enterprise security program. You will lead security testing, architecture advisory and cloud security initiatives across the aviation ICT ecosystem.

The role demands eight years of direct cybersecurity experience, strong collaboration skills, and professional certifications. A three-year initial contract is offered with potential permanent tenure or renewal.

Qualifications

• Eight years of direct cybersecurity experience in infrastructure and enterprise security.
• Trained in Cybersecurity and Information Security.
• Active professional certification from ISACA, (ISC)², or equivalent.
• Strong communication and cross-functional collaboration skills.
• Willingness to participate in administrative responsibilities.

Responsibilities

• Coordinate security testing activities with CAAS system owners, infrastructure teams and vendors.
• Oversee the preparation and delivery of security testing reports with remediation recommendations and ensure vulnerabilities are addressed.
• Provide advisory support to translate requirements into secure technical solutions and secure SDLC practices.
• Support onboarding projects into cloud compliance tools and deploy cybersecurity solutions.
• Stay updated on AI security and quantum security threats and advise on readiness.

Skills

Cybersecurity

Information Security

Security Testing

Security Architecture

Vulnerability Assessment

Cloud Security

Education

Information Technology/Computer Science/Engineering

Tools

SHIP-HATS

VMS

Job description

What the role is:

Cybersecurity is a critical pillar of CAAS’ work. To ensure that the Singapore air hub remains safe and secure for air travel, every mission-critical system that supports air hub operations must be well-protected and resilient against rapidly evolving, and increasingly complex, cybersecurity threats. CAAS is looking for a strong and dynamic candidate to be part of the Cybersecurity Services (CSS) Team, under the Cybersecurity Division (CSD). You will develop and implement enterprise-wide processes and programs to strengthen the resilience of CAAS and aviation sector ICT systems. You will promote and enforce security policies and training that prepare CAAS to respond efficiently and effectively to cyber threats. You will also need to identify, design and implement cybersecurity solutions and services across the enterprise.

What you will be working on:

Security Testing Support:

• Coordinate with CAAS system owners, infrastructure teams and vendors to conduct security testing activities including VAPT and secure coding assessments.
• Oversee the preparation and delivery of security testing reports with remediation recommendations and ensure all vulnerabilities are addressed.

Security Architecture and Design Advisory:

• Provide advisory support to interpret user requirements and guide the translation of business needs into secure technical solutions aligned with organisational policies.
• Support the design of secure systems within development lifecycles by providing guidance on security architectural guidelines and reviewing system security designs.
• Advise on security specifications for system components that address security objectives and functional requirements and provide advisory support for implementing "Security by Design" frameworks throughout development processes.

Technical Security Implementation:

• Support onboarding projects into cloud compliance tools like SHIP-HATS, Vulnerabilities Management System (VMS), providing advisory guidance throughout the process.
• Engage with system owners and vendors to deploy cybersecurity solutions and provide technical advisory support for security tool implementation.

Emerging Technology Security:

• Evaluate quantum computing threats to current cryptographic systems. Plan and implement post-quantum cryptography readiness and migration strategies.
• Stay current with emerging AI security threats and defensive techniques. Evaluate new AI security tools and technologies for organisational adoption. Contribute to AI security best practices and internal training programmes.

Stakeholder Engagement:

• Collaborate with CAAS system owners and development teams to address vulnerabilities, facilitate communication between technical teams and management, and stay current with evolving security practices and emerging threats.

What we are looking for:

• Trained in Cybersecurity and Information Security preferred. Trained in Information Technology, Computer Science, or Engineering (Computing/Telecommunications), or equivalent professional qualifications can also apply with the relevant experience.
• Minimum eight years of direct cybersecurity experience with expertise in infrastructure security, network security, and enterprise cybersecurity initiatives.
• Strong analytical and problem-solving capabilities, willingness to engage in administrative responsibilities, ability to work in cross-functional teams, and enthusiasm for emerging technologies including AI security and quantum security.
• Active professional certification from ISACA, (ISC)², or equivalent organisations preferred.
• Self-motivated professional with strong team collaboration skills, curiosity and passion for cybersecurity with excellent communication and analytical skills.

Note: Your appointment designation will commensurate with your relevant work experience. Successful candidates will be offered a 3-year contract in the first instance and may be considered for placement on a permanent tenure or subsequent contract renewal.

About Civil Aviation Authority of Singapore

The Civil Aviation Authority of Singapore's raison d'etre is to develop the air hub and aviation industry in Singapore, expanding Singapore's links to the rest of the world. We enable opportunities through aviation, making connections, opening doors and enabling choices in people's lives.