Cyber Risk & Threat Assessment Specialist

Housing & Development Board; Singapore; On-site; SGD 100,000 - 140,000; Full time

Job summary

Housing & Development Board (HDB) is seeking a skilled cybersecurity professional to strengthen its Threat & Risk Assessment framework across enterprise IT systems. You will work with system owners, project teams, and senior stakeholders to identify risks early and drive effective mitigation strategies.

Requirements include 2+ years in ICT security, hands-on risk management experience, cloud security knowledge (AWS/Azure), and relevant certifications.

Qualifications

• Experience in Threat Modelling using frameworks such as MITRE ATT&CK or STRIDE.
• Minimum 2 years of ICT security work experience.
• Hands-on exposure to cybersecurity risk management, control assessment, and security testing.
• Strong knowledge of cloud security, including cloud architecture and security controls (AWS/Azure).
• Familiarity with IT security principles, governance, and risk management frameworks.
• Relevant cybersecurity certifications (e.g., CISSP, CISM, CRISC, CCSP).
• Foundational security domains: access control, network security, cryptography, incident response.

Responsibilities

• Develop, maintain, and operationalise Threat & Risk Assessment framework across IT systems and programmes.
• Conduct end-to-end cybersecurity risk assessments, including threat identification and risk analysis.
• Provide security advisory and consultancy to project teams on cybersecurity requirements and vendor proposals.
• Lead security reviews including SSAT and security assurance activities.
• Promote security-by-design across development, enhancements, and modernisation initiatives.
• Monitor emerging threats and recommend pragmatic controls to improve security posture.

Skills

Threat Modelling

MITRE ATT&CK

Cloud Security

AWS Security

IT Security Principles

Cybersecurity Certifications

Access Control

Network Security

Job description

Housing & Development Board (HDB) is seeking a skilled cybersecurity professional to strengthen its Threat & Risk Assessment framework across enterprise IT systems. You will work with system owners, project teams, and senior stakeholders to identify risks early and drive effective mitigation strategies.

Requirements include 2+ years in ICT security, hands-on risk management experience, cloud security knowledge (AWS/Azure), and relevant certifications.