Cybersecurity Programme Manager: Bug Bounty & VRP

Assurity Trusted Solutions; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Assurity Trusted Solutions (ATS) is a GovTech affiliate leading the Crowdsourced Vulnerability Discovery Programmes (GBBP, VRP, VDP). The Programme Manager will plan, execute, and monitor these programmes, coordinating with government agencies, researchers, and the bug bounty vendor to ensure successful runs.

Key responsibilities include vendor management, data-driven reporting, and continuous process improvement using vibe coding and GovTech platforms to streamline operations.

Qualifications

• At least five years of experience managing IT or technology programmes/projects, with cybersecurity familiarity a strong plus.
• Excellent verbal and written English for technical-to-non-technical communication.
• Experience managing vendors or contracts and monitoring service levels.

Responsibilities

• Plan, schedule, and oversee GBBP, VRP, and VDP runs.
• Coordinate with government agencies on participation and timelines; ensure data/documents are submitted on time.
• Manage CVDP vendor relationships: contracts, performance, issue escalation, onboarding researchers.
• Support triage team with reports and coordinate with agencies on disputes.
• Assist procurement/tender exercises: drafting specs and evaluating proposals.
• Prepare programme reporting, dashboards, and management updates.
• Drive stakeholder communications and outreach to raise participation rates.
• Identify and implement process improvements using AI-assisted development and GovTech platforms.

Skills

Project management

Vendor management

Communication

Data analysis

AI-assisted development

Education

PMP / CITPM certification

Tools

Ownself Gather

Opus

Job description

Assurity Trusted Solutions (ATS) is a GovTech affiliate leading the Crowdsourced Vulnerability Discovery Programmes (GBBP, VRP, VDP). The Programme Manager will plan, execute, and monitor these programmes, coordinating with government agencies, researchers, and the bug bounty vendor to ensure successful runs.

Key responsibilities include vendor management, data-driven reporting, and continuous process improvement using vibe coding and GovTech platforms to streamline operations.