Cybersecurity Engineer, Security Programmes (Contract)

Government Technology Agency (GovTech); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

GovTech Singapore invites qualified professionals to lead cybersecurity programmes across the organisation, coordinating end‑to‑end projects with internal and external stakeholders to strengthen security posture and compliance.

You will oversee cyber exercises, phishing simulations, awareness training, advisories and cross‑functional project delivery, reporting progress to leadership and ensuring timely action on risks and improvements.

Qualifications

• Bachelor's degree in a relevant field.
• Cybersecurity certifications (e.g., CISSP, CISM, Security+ or equivalent).
• Project management certifications (PMP, PRINCE2, Agile/Scrum).
• Demonstrated ability to manage multiple workstreams, timelines and dependencies.
• Excellent stakeholder management and communication skills.
• Strong analytical skills with ability to interpret data and translate insights into recommendations.

Responsibilities

• Coordinate and execute complex cyber exercises with multiple stakeholders and vendors.
• Drive phishing simulation campaigns, analyse results and implement education frameworks.
• Deliver end-to-end cybersecurity awareness programmes with tracking and compliance reporting.
• Coordinate development and dissemination of cybersecurity advisories and ensure rapid responses.
• Lead and manage cybersecurity projects, monitoring milestones, budgets and risks.

Skills

Stakeholder management

Project management

Cybersecurity

Agile/Scrum

Data analysis

Dashboards

Automation (Python/VBA)

Education

Bachelor's degree

Cybersecurity certifications (CISSP, CISM, Security+)

Project management certifications (PMP, PRINCE2, Agile/Scrum)

Tools

JIRA

Excel

Power BI

Tableau

Job description

What the role is

You will drive and deliver cybersecurity programmes and initiatives across the organisation through overseeing end-to-end projects with internal and external stakeholders to enhance organisational security posture and compliance. Working with cross-functional stakeholders, you will define scope, manage schedules and dependencies, track risks and issues, and report progress to leadership.

What you will be working on

Cyber Exercises Plan

Coordinate and execute complex cyber exercises involving multiple business and technology stakeholders with varying priorities, managing vendor evaluation, procurement processes and security clearance requirements. Develop comprehensive exercise frameworks including realistic scenarios, participant matrices, detailed logistics coordination (venues, equipment, access arrangements), and supporting artefacts while facilitating stakeholder review and approval processes across competing requirements. Monitor participant performance and exercise flow throughout exercise, then drive thorough post-exercise analysis, lessons learnt consolidation, action item tracking and closure with accountable owners across departments and organisational boundaries.

Phishing Simulation Exercises

Coordinate end-to-end phishing simulation exercises across diverse organisational audiences, managing campaign scheduling, vendor coordination, content approvals and complex stakeholder communications. Analyse results and identify vulnerability patterns across departments, send personalised results notifications to affected participants, and implement education frameworks including classroom training and counselling sessions. Drive systematic follow-up actions and targeted remediation programmes while balancing educational impact with operational constraints.

Cybersecurity Awareness Programme

Manage end-to-end delivery of mandatory cybersecurity e-learning programmes across the organisation, coordinating with third-party content providers while navigating competing deadlines and stakeholder expectations. Achieve 100% completion targets through systematic tracking, targeted follow-up communications, escalation management with supervisors, and comprehensive regulatory compliance reporting. Monitor participation metrics across departments, document legitimate exemptions with appropriate justifications and approvals, and coordinate with stakeholders to address completion gaps while maintaining audit-ready documentation. Develop and implement cyber event strategies aligned with organisational objectives. Manage event budgets, timelines, and resources to ensure successful delivery within constraints. Liaise with internal stakeholders, external vendors, and service providers to coordinate event logistics.

Cybersecurity Advisories

Coordinate development and dissemination of evidence-based cybersecurity advisories, planning advisory timing in accordance with phishing exercise schedules to maximise educational impact while translating complex technical inputs into actionable guidance for diverse audiences. Manage multi-channel deployment (email, intranet, visual aids) while balancing urgent threat communications with planned advisory schedules, reserving flexibility for ad-hoc advisory requests and competing organisational priorities. Maintain distribution frameworks, communication templates and engagement tracking while ensuring rapid response capability for emerging threats and incidents.

Cybersecurity Project Management

Lead and manage cybersecurity projects across the organisation, including tool implementation, process improvements, and compliance initiatives. Collaborate with business units to ensure successful delivery and adoption whilst managing multiple workstreams, timelines, and dependencies. Track project milestones, risks, budgets, and provide strategic reporting to enhance organisational security posture.

Vendor & Contract Management

Manage cybersecurity vendors including awareness platforms, incident response partners, and security solution providers. Oversee contract renewals, performance reviews, SLAs, and procurement processes whilst ensuring compliance with internal and regulatory requirements. Conduct comprehensive vendor evaluations, manage security clearance requirements, and coordinate procurement processes.

What we are looking for

Minimum 3 years of experience in IT programme/project-related work (e.g., Planning and executing awareness programmes and events). Minimum 2 years of experience in Cybersecurity (e.g., Implementation of security tools in enterprise environment, security awareness, incident response, or related domains). Bachelor's degree in a relevant field (e.g., Information Technology, Computer Science, Business, Communications, or related disciplines). Cybersecurity certifications (e.g., CISSP, CISM, Security+, GCIH, or equivalent). Project management certifications (e.g., PMP, PRINCE2, Agile/Scrum certifications). Demonstrated ability to manage multiple workstreams, timelines and dependencies, with strong attention to detail. Excellent stakeholder management and communication skills; enjoys engaging both technical and non-technical audiences. Strong analytical skills with ability to interpret data, identify trends and translate insights into actionable recommendations. Thrives in highly collaborative, fast-paced environments with frequent stakeholder interactions and presentations. Experience with data analysis, creating dashboards and reports for management reporting. Ability to work independently and assume responsibility for programme deliverables Experience in reporting and dashboarding tools (e.g., JIRA, Excel, Power BI, Tableau). Experience with Agile/Scrum methodologies. Automation skills (e.g., Python, VBA, Power Automate, scripting) for process improvement and efficiency.

Contract Details

This is a 2-Year Contract.

About the Singapore Public Service

The Singapore Public Service plays a key role in the economic growth, progress and stability of Singapore by formulating and implementing government policies, as well as providing key public services. Whether you are a fresh graduate joining the workforce or an experienced professional, the Singapore Public Service offers a great variety of job opportunities for you. The work in the Public Service can be broadly categorised into the following sectors: Economic, Social, Security & External Relations, and Administration & Corporate Development. Be part of the team that shapes the future of Singapore.