Deputy Director (Cyber Analysis & Operations)

MPA Maritime and Port Authority of Singapore; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

MPA Maritime and Port Authority of Singapore seeks an executive to lead the Cybersecurity Analysis and Operations function of the Maritime Cyber Assurance and Operations Centre (MCAOC). The Deputy Director will direct 24/7 operations, coordinate incident response, and ensure protection of port, vessel, and onshore IT/OT systems.

Responsibilities include developing SOC strategy, leading threat intelligence integration, and driving automation with SIEM/EDR, SOAR, and AI analytics, while

Qualifications

• 12–15+ years in cybersecurity with leadership in SOC operations.
• Deep expertise in IT/OT convergence and CII protection.
• Proven ability to report to boards and crisis leadership.
• Experience with Singapore government/critical infrastructure cybersecurity.

Responsibilities

• Provide executive leadership for 24/7 MCAOC operations and real-time threat monitoring.
• Develop SOC strategy integrating threat intel, red teaming, and AI analytics.
• Establish incident response playbooks and sectoral exercises for CII protection.
• Oversee IT/OT convergence with enterprise architecture and CII owners.
• Drive automation, SOAR, SIEM/EDR enhancements for early threat warning.
• Lead investigations, vulnerability assessments, and remediation for MCAOC assets.
• Deliver dashboards on SOC metrics and threat trends to leadership.
• Foster partnerships with industry, government, and international ports.

Skills

Executive leadership

SOC operations

IT/OT convergence

Threat intelligence platforms

Incident management

SOAR/Siem/EDR

Board-level reporting

Education

Cybersecurity degree

CISSP certification

CISM certification

GIAC (GCIH/GCIA)

Tools

SIEM tools

EDR

NDR

Threat intel platforms

SOAR

Job description

What the role is

The Deputy Director of Cybersecurity Analysis and Operations Department leads the strategic and operational direction of MPA’s Maritime Cyber Assurance and Operations Centre (MCAOC), ensuring 24/7 protection of MPA digital systems. This executive role drives cyber defense for port operations, vessels, onshore IT/OT systems, and national maritime resilience, collaborating with industry, government agencies, and international partners to counter evolving threats.

What you will be working on

• Provide executive leadership for 24/7 MCAOC operations, including real-time threat monitoring, anomaly detection, incident response, and recovery for maritime IT/OT environments.
• Develop and execute security operations centre (SOC) strategy, integrating cyber threat intelligence, red teaming, threat hunting, and AI-driven analytics to safeguard port operations, vessels, and offshore assets.
• Establish and maintain cyber incident response frameworks, playbooks, and sectoral-level exercises (e.g., TTX simulations) for maritime critical information infrastructure (CII) protection.
• Oversee convergence of IT/OT cybersecurity requirements with Integrated Operations Centre, enterprise architecture, and CII owners for holistic risk management.
• Drive automation, SOAR, SIEM/EDR enhancements, and data linkages for early warning of cyber threats impacting navigational safety and business continuity.
• Lead investigations, vulnerability assessments, and remediation for MPA digital systems and CII partners, ensuring compliance with Singapore cybersecurity regulations and standards.
• Deliver executive dashboards and reports on SOC metrics (MTTD/MTTR), threat trends, and resilience posture to MPA CISO, leadership and national stakeholders.
• Foster partnerships with industry, research community, and international ports for information sharing and operational enhancements.
• Build and mentor a high-performing SOC team, emphasizing maritime-specific skills in OT/ICS security and Maritime Shipboard Operational Technology (MariOT) testbed training initiatives.

What we are looking for

• Background in Cybersecurity, Computer Science, or related field.
• 12–15+ years in cybersecurity, with 7+ years leading SOC operations.
• Deep expertise in IT/OT convergence, CII protection, red teaming, and incident management.
• Proficiency in SIEM, EDR, NDR, SOAR, threat intelligence platforms, and cyber tools.
• Strong executive communication for board-level reporting and crisis leadership.
• Experience in Singapore government/critical infrastructure cybersecurity.

Preferred Qualifications

• CISSP, CISM, GIAC (GCIH/GCIA), or equivalent.

Key Success Indicators

• Enhanced MTTD/MTTR and zero major incidents impacting port operations.
• High team maturity, retention, and contributions to sectoral and national cyber exercises.

http://jobs.careers.gov.sg

About the Singapore Public Service

The Singapore Public Service plays a key role in the economic growth, progress and stability of Singapore by formulating and implementing government policies, as well as providing key public services.

Whether you are a fresh graduate joining the workforce or an experienced professional, the Singapore Public Service offers a great variety of job opportunities for you.

The work in the Public Service can be broadly categorised into the following sectors:

• Economic
• Social
• Security & External Relations
• Administration & Corporate Development

Be part of the team that shapes the future of Singapore.