Cybersecurity Engineer, Security Programmes (Contract)

Government Technology Agency (GovTech); Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

GovTech in Singapore leads the delivery of cybersecurity programmes and initiatives across the organisation, coordinating cross‑functional teams and external partners to strengthen security posture and compliance.

You will oversee end‑to‑end projects including cyber exercises, phishing simulations, and awareness programmes, reporting progress to leadership and ensuring timely action on risks and dependencies.

Qualifications

• Minimum 3 years of IT programme/project experience.
• Minimum 2 years in Cybersecurity.
• Bachelor’s degree in IT, CS, Business, Communications or related.
• Certifications: CISSP, CISM, Security+, GCIH or equivalent.
• PM certifications: PMP, PRINCE2, Agile/Scrum.
• Demonstrated ability to manage multiple workstreams, timelines and dependencies.
• Excellent stakeholder management and communication skills.
• Experience with data analysis and dashboards.
• Experience with Agile/Scrum methodologies.
• Automation skills in Python, VBA, Power Automate, scripting.

Responsibilities

• Drive and oversee end-to-end cybersecurity programmes across the organisation.
• Coordinate cyber exercises and phishing simulations, including vendor coordination and post-event reviews.
• Oversee cybersecurity awareness programmes and regulatory reporting.
• Coordinate development and dissemination of advisories and multi-channel communications.
• Lead cybersecurity projects, tool implementations, and process improvements.
• Manage cybersecurity vendors, contracts, SLAs, and procurement processes.

Skills

Stakeholder management

Communication

Analytical skills

Agile/Scrum

Python

VBA

Power Automate

Scripting

Education

Bachelor’s degree in IT, CS, Business, Communications or related

CISSP/CISM/Security+/GCIH or equivalent

Tools

JIRA

Excel

Power BI

Tableau

Job description

What the role is

You will drive and deliver cybersecurity programmes and initiatives across the organisation through overseeing end‑to‑end projects with internal and external stakeholders to enhance organisational security posture and compliance. Working with cross‑functional stakeholders, you will define scope, manage schedules and dependencies, track risks and issues, and report progress to leadership.

What you will be working on

• Cyber Exercises Plan: coordinate and execute complex cyber exercises involving multiple business and technology stakeholders with varying priorities, managing vendor evaluation, procurement processes and security clearance requirements. Develop comprehensive exercise frameworks including realistic scenarios, participant matrices, detailed logistics coordination (venues, equipment, access arrangements), and supporting artefacts while facilitating stakeholder review and approval processes across competing requirements. Monitor participant performance and exercise flow throughout exercise, then drive thorough post‑exercise analysis, lessons‑learnt consolidation, action item tracking and closure with accountable owners across departments and organisational boundaries.
• Phishing Simulation Exercises: coordinate end‑to‑end phishing simulation exercises across diverse organisational audiences, managing campaign scheduling, vendor coordination, content approvals and complex stakeholder communications; analyse results and identify vulnerability patterns across departments; send personalised results notifications to affected participants; implement education frameworks including classroom training and counselling sessions; drive systematic follow‑up actions and targeted remediation programmes while balancing educational impact with operational constraints.
• Cybersecurity Awareness Programme: manage end‑to‑end delivery of mandatory cybersecurity e‑learning programmes across the organisation, coordinating with third‑party content providers while navigating competing deadlines and stakeholder expectations; achieve 100percent completion targets through systematic tracking, targeted follow‑up communications, escalation management with supervisors and comprehensive regulatory compliance reporting; monitor participation metrics across departments, document legitimate exemptions with appropriate justifications and approvals, and coordinate stakeholders to address completion gaps while maintaining audit‑ready documentation; develop and implement cyber event strategies aligned with organisational objectives.
• Cybersecurity Advisories: coordinate development and dissemination of evidence‑based cybersecurity advisories, planning advisory timing in accordance with phishing exercise schedules to maximise educational impact while translating complex technical inputs into actionable guidance for diverse audiences; manage multi‑channel deployment (email, intranet, visual aids) while balancing urgent threat communications with planned advisory schedules, reserving flexibility for ad‑hoc advisory requests and competing organisational priorities; maintain distribution frameworks, communication templates and engagement tracking while ensuring rapid response capability for emerging threats and incidents.
• Cybersecurity Project Management: lead and manage cybersecurity projects across the organisation, including tool implementation, process improvements and compliance initiatives; collaborate with business units to ensure successful delivery and adoption whilst managing multiple workstreams, timelines, and dependencies; track project milestones, risks, budgets, and provide strategic reporting to enhance organisational security posture.
• Vendor & Contract Management: manage cybersecurity vendors including awareness platforms, incident response partners and security solution providers; oversee contract renewals, performance reviews, SLAs and procurement processes whilst ensuring compliance with internal and regulatory requirements; conduct comprehensive vendor evaluations, manage security clearance requirements and coordinate procurement processes.

What we are looking for

• Minimum 3 years of experience in IT programme/project‑related work (e.g., planning and executing awareness programmes and events).
• Minimum 2 years of experience in Cybersecurity (e.g., implementation of security tools in enterprise environment, security awareness, incident response or related domains).
• Bachelor’s degree in a relevant field (Information Technology, Computer Science, Business, Communications or related disciplines).
• Cybersecurity certifications (CISSP, CISM, Security+, GCIH or equivalent).
• Project management certifications (PMP, PRINCE2, Agile/Scrum certifications).
• Demonstrated ability to manage multiple workstreams, timelines and dependencies, with strong attention to detail.
• Excellent stakeholder management and communication skills; enjoys engaging both technical and non‑technical audiences.
• Strong analytical skills with ability to interpret data, identify trends and translate insights into actionable recommendations.
• Thrives in highly collaborative, fast‑paced environments with frequent stakeholder interactions and presentations.
• Experience with data analysis, creating dashboards and reports for management reporting.
• Ability to work independently and assume responsibility for programme deliverables.
• Experience in reporting and dashboarding tools (JIRA, Excel, Power BI, Tableau).
• Experience with Agile/Scrum methodologies.
• Automation skills (Python, VBA, Power Automate, scripting) for process improvement and efficiency.
• 2‑Year Contract.