Cybersecurity Engineer, Security Programmes (Contract)

Monetary Authority of Singapore; Singapore; Sur place; SGD 70 000 - 100 000; Plein temps

Résumé du poste

The Monetary Authority of Singapore is seeking a Cybersecurity Project Manager to drive cybersecurity programs across the organization. The role involves overseeing projects with stakeholders, managing exercises, and developing awareness programs. Ideal candidates will have a bachelor’s degree, relevant certifications, and experience in cybersecurity and project management. Strong analytical and communication skills are essential. Join us to enhance our security posture in a collaborative environment.

Qualifications

• Minimum 3 years of IT programme/project experience.
• At least 2 years in Cybersecurity.
• Strong attention to detail in managing timelines and dependencies.

Responsabilités

• Drive and deliver cybersecurity programmes across the organisation.
• Coordinate cyber exercises and phishing simulations.
• Manage cybersecurity awareness programmes and advisories.

Connaissances

IT programme/project management

Cybersecurity

Analytical skills

Stakeholder management

Communication skills

Data analysis

Formation

Bachelor's degree in relevant field

Cybersecurity certifications (CISSP, CISM, etc.)

Project management certifications (PMP, PRINCE2, etc.)

Outils

JIRA

Excel

Power BI

Tableau

Python

Description du poste

What the role is:

You will drive and deliver cybersecurity programmes and initiatives across the organisation through overseeing end-to-end projects with internal and external stakeholders to enhance organisational security posture and compliance.

Working with cross-functional stakeholders, you will define scope, manage schedules and dependencies, track risks and issues, and report progress to leadership.

What you will be working on:

Cyber Exercises

• Plan, coordinate and execute complex cyber exercises involving multiple business and technology stakeholders with varying priorities, managing vendor evaluation, procurement processes and security clearance requirements.
• Develop comprehensive exercise frameworks including realistic scenarios, participant matrices, detailed logistics coordination (venues, equipment, access arrangements), and supporting artefacts while facilitating stakeholder review and approval processes across competing requirements.
• Monitor participant performance and exercise flow throughout exercise, then drive thorough post‑exercise analysis, lessons learnt consolidation, action item tracking and closure with accountable owners across departments and organisational boundaries.

Phishing Simulation Exercises

• Coordinate end-to-end phishing simulation exercises across diverse organisational audiences, managing campaign scheduling, vendor coordination, content approvals and complex stakeholder communications.
• Analyse results and identify vulnerability patterns across departments, send personalised results notifications to affected participants, and implement education frameworks including classroom training and counselling sessions.
• Drive systematic follow‑up actions and targeted remediation programmes while balancing educational impact with operational constraints.

Cybersecurity Awareness Programme

• Manage end-to-end delivery of mandatory cybersecurity e-learning programmes across the organisation, coordinating with third‑party content providers while navigating competing deadlines and stakeholder expectations.
• Achieve 100% completion targets through systematic tracking, targeted follow‑up communications, escalation management with supervisors, and comprehensive regulatory compliance reporting.
• Monitor participation metrics across departments, document legitimate exemptions with appropriate justifications and approvals, and coordinate with stakeholders to address completion gaps while maintaining audit‑ready documentation.
• Develop and implement cyber event strategies aligned with organisational objectives.
• Manage event budgets, timelines, and resources to ensure successful delivery within constraints.
• Liaise with internal stakeholders, external vendors, and service providers to coordinate event logistics.

Cybersecurity Advisories

• Coordinate development and dissemination of evidence‑based cybersecurity advisories, planning advisory timing in accordance with phishing exercise schedules to maximise educational impact while translating complex technical inputs into actionable guidance for diverse audiences.
• Manage multi‑channel deployment (email, intranet, visual aids) while balancing urgent threat communications with planned advisory schedules, reserving flexibility for ad‑hoc advisory requests and competing organisational priorities.
• Maintain distribution frameworks, communication templates and engagement tracking while ensuring rapid response capability for emerging threats and incidents.

Cybersecurity Project Management

• Lead and manage cybersecurity projects across the organisation, including tool implementation, process improvements, and compliance initiatives.
• Collaborate with business units to ensure successful delivery and adoption whilst managing multiple workstreams, timelines, and dependencies.
• Track project milestones, risks, budgets, and provide strategic reporting to enhance organisational security posture.

Vendor & Contract Management

• Manage cybersecurity vendors including awareness platforms, incident response partners, and security solution providers.
• Oversee contract renewals, performance reviews, SLAs, and procurement processes whilst ensuring compliance with internal and regulatory requirements.
• Conduct comprehensive vendor evaluations, manage security clearance requirements, and coordinate procurement processes.

What we are looking for:

• Minimum 3 years of experience in IT programme/project-related work (e.g., Planning and executing awareness programmes and events).
• Minimum 2 years of experience in Cybersecurity (e.g., Implementation of security tools in enterprise environment, security awareness, incident response, or related domains).
• Bachelor's degree in a relevant field (e.g., Information Technology, Computer Science, Business, Communications, or related disciplines).
• Cybersecurity certifications (e.g., CISSP, CISM, Security+, GCIH, or equivalent).
• Project management certifications (e.g., PMP, PRINCE2, Agile/Scrum certifications).
• Demonstrated ability to manage multiple workstreams, timelines and dependencies, with strong attention to detail.
• Excellent stakeholder management and communication skills; enjoys engaging both technical and non‑technical audiences.
• Strong analytical skills with ability to interpret data, identify trends and translate insights into actionable recommendations.
• Thrives in highly collaborative, fast‑paced environments with frequent stakeholder interactions and presentations.
• Experience with data analysis, creating dashboards and reports for management reporting.
• Ability to work independently and assume responsibility for programme deliverables.
• Experience in reporting and dashboarding tools (e.g., JIRA, Excel, Power BI, Tableau).
• Experience with Agile/Scrum methodologies.
• Automation skills (e.g., Python, VBA, Power Automate, scripting) for process improvement and efficiency.