Deputy Director (Cyber Analysis & Operations)

Public Service Division; Singapore; On-site; SGD 250,000 - 420,000; Full time

Job summary

Maritime and Port Authority of Singapore (MPA) seeks a Deputy Director to lead the Maritime Cyber Assurance and Operations Centre, ensuring 24/7 protection of port operations and NDL/OT systems. You will direct cyber defense for vessels, onshore IT/OT, and national resilience, coordinating with industry, agencies, and international partners.

The role emphasizes executive leadership, incident management, and advanced analytics to safeguard critical maritime infrastructure and information systems.

Qualifications

• Background in Cybersecurity, Computer Science, or related field.
• 12-15+ years in cybersecurity with 7+ years leading SOC operations.
• Deep expertise in IT/OT convergence and CII protection.
• Experience with government or critical infrastructure cybersecurity.
• Strong executive communication for board-level reporting.

Responsibilities

• Provide executive leadership for 24/7 MCAOC operations and incident response.
• Develop SOC strategy integrating threat intel, red teaming, and AI analytics.
• Establish incident response playbooks and sectoral exercises for CII.
• Oversee IT/OT cybersecurity alignment with enterprise architecture and CII owners.
• Drive automation and SIEM/EDR enhancements for threat detection.
• Lead investigations and remediation for maritime digital systems.
• Deliver executive dashboards on SOC metrics and resilience.
• Foster partnerships with industry and international ports.
• Build and mentor a high-performing SOC team with MariOT focus.

Skills

Executive leadership

SOC operations

Threat intelligence

Incident management

IT/OT convergence

Education

Cybersecurity degree

Tools

SIEM

EDR

NDR

SOAR

Job description

[What the role is]

The Deputy Director of Cybersecurity Analysis and Operations Department leads the strategic and operational direction of MPA’s Maritime Cyber Assurance and Operations Centre (MCAOC), ensuring 24/7 protection of MPA digital systems. This executive role drives cyber defense for port operations, vessels, onshore IT/OT systems, and national maritime resilience, collaborating with industry, government agencies, and international partners to counter evolving threats.

[What you will be working on]

The key duties and responsibilities are to:

• Provide executive leadership for 24/7 MCAOC operations, including real-time threat monitoring, anomaly detection, incident response, and recovery for maritime IT/OT environments.
• Develop and execute security operations centre (SOC) strategy, integrating cyber threat intelligence, red teaming, threat hunting, and AI-driven analytics to safeguard port operations, vessels, and offshore assets.
• Establish and maintain cyber incident response frameworks, playbooks, and sectoral-level exercises (e.g., TTX simulations) for maritime critical information infrastructure (CII) protection.
• Oversee convergence of IT/OT cybersecurity requirements with Integrated Operations Centre, enterprise architecture, and CII owners for holistic risk management.
• Drive automation, SOAR, SIEM/EDR enhancements, and data linkages for early warning of cyber threats impacting navigational safety and business continuity.
• Lead investigations, vulnerability assessments, and remediation for MPA digital systems and CII partners, ensuring compliance with Singapore cybersecurity regulations and standards.
• Deliver executive dashboards and reports on SOC metrics (MTTD/MTTR), threat trends, and resilience posture to MPA CISO, leadership and national stakeholders.
• Foster partnerships with industry, research community, and international ports for information sharing and operational enhancements.
• Build and mentor a high-performing SOC team, emphasizing maritime-specific skills in OT/ICS security and Maritime Shipboard Operational Technology (MariOT) testbed training initiatives.

[What we are looking for]

• Background in Cybersecurity, Computer Science, or related field.
• 12-15+ years in cybersecurity, with 7+ years leading SOC operations.
• Deep expertise in IT/OT convergence, CII protection, red teaming, and incident management.
• Proficiency in SIEM, EDR, NDR, SOAR, threat intelligence platforms, and cyber tools.
• Strong executive communication for board-level reporting and crisis leadership.
• Experience in Singapore government/critical infrastructure cybersecurity.

Preferred Qualifications

• Certifications: CISSP, CISM, GIAC (GCIH/GCIA), or equivalent.

Key Success Indicators

• Enhanced MTTD/MTTR and zero major incidents impacting port operations.
• High team maturity, retention, and contributions to sectoral and national cyber exercises