Assistant Director/ Senior Manager / Manager (Cyber Exercise Planner), JORD

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

The Cyber Security Agency of Singapore (CSA) is seeking a motivated professional to design, plan, and execute national-level and sector-wide cybersecurity exercises. You will help build a comprehensive cyber exercise ecosystem, spanning crisis management tabletop exercises, command post/functional exercises, and live-fire cyber range activities.

Key responsibilities include stakeholder engagement across government and industry, developing exercise roadmaps, and delivering actionable after-action

Qualifications

• General degree in cybersecurity, information security, computer science or related field.
• 2+ years in cybersecurity operations, incident response, cyber exercise planning, crisis management, national security or business continuity.
• Experience managing complex multi-stakeholder projects.
• Strong understanding of cybersecurity operations and incident response workflows.
• Excellent facilitation, communication, and stakeholder management skills.

Responsibilities

• Design and operationalise a national or sector-wide cyber exercise ecosystem.
• Assist to develop exercise roadmaps aligned to organisational or national cybersecurity strategies.
• Lead the end-to-end planning and execution of multiple exercise formats.
• Assist to develop realistic cyber threat scenarios informed by threat intelligence, trends, and sector-specific risks.

Skills

Cybersecurity operations

Incident response

Cyber exercise planning

Crisis management

National security

Business continuity

Stakeholder management

Facilitation

Communication

Education

General Degree (Cybersecurity or related)

Job description

We are seeking a highly motivated and strategically minded professional to design, plan, and execute national-level and sector-wide cybersecurity exercises. This role will assist with the development of a comprehensive cyber exercise ecosystem that strengthens the preparedness, coordination, and operational maturity of stakeholders across government, critical infrastructure operators, and industry partners. The successful candidate will assist with the development of multi-tiered exercise programmes spanning crisis management tabletop exercises (TTX), command post / functional exercises, and technical live-fire cyber range activities. The role requires strong stakeholder management, cyber domain knowledge, strategic thinking, and the ability to translate complex cyber risks into meaningful readiness outcomes.

Responsibilities

1. 1. Cyber Exercise Strategy & Programme Development
   • Design and operationalise a national or sector-wide cyber exercise ecosystem
   • Assist to develop exercise roadmaps aligned to organisational or national cybersecurity strategies
   • Build progressive exercise pathways that uplift stakeholder maturity
   • Establish exercise objectives, governance structures, success metrics, and evaluation frameworks
   • Lead the end-to-end planning and execution of multiple exercise formats
   • Assist to develop realistic cyber threat scenarios informed by current threat intelligence, emerging attack trends, sector-specific risks, and geopolitical developments
   • Integrate cyber-physical, supply chain, and multi-domain crisis elements where relevant
2. 2. Stakeholder Engagement & Coordination
   • Engage government agencies, critical infrastructure sectors, industry operators, and international partners
   • Facilitate workshops, planning conferences, and exercise briefings
   • Build trusted relationships across technical, operational, and executive stakeholder groups
   • Coordinate exercise participation across diverse organisations and maturity levels
3. 3. Exercise Evaluation & Capability Development
   • Assist to develop exercise evaluation methodologies and after-action review processes
   • Identify operational gaps, policy issues, capability shortfalls, and systemic risks
   • Produce post-exercise reports with actionable recommendations
   • Track remediation efforts and long-term capability uplift across stakeholders

Qualifications

• General Degree, preferably one in Cybersecurity, Information Security, Computer Science, Public Policy, International Relations, or related field
• 2+ years of experience in one or more of the following: Cybersecurity operations, Incident response, Cyber exercise planning, Crisis management, National security, Business continuity
• Experience managing complex multi-stakeholder projects
• Strong understanding of cybersecurity operations and incident response workflows
• Excellent facilitation, communication, and stakeholder management skills

Preferred Experience & Desired Attributes

• Experience designing or participating in cyber exercises, simulations, or war games
• Familiarity with national cybersecurity frameworks or critical infrastructure environments
• Experience with cyber ranges, adversary simulation, or red teaming
• Understanding of crisis management structures and emergency response coordination
• Knowledge of OT/ICS cybersecurity is advantageous
• Strategic thinker with strong systems-level perspective
• Able to engage both senior executives and technical operators
• Comfortable operating in ambiguous and fast-moving environments
• Strong writing, facilitation, and briefing skills
• Collaborative and mission-driven mindset