Deputy Director (Cyber Analysis & Operations)

Maritime and Port Authority of Singapore; Singapore; On-site; SGD 250,000 - 350,000; Full time

Job summary

Maritime and Port Authority of Singapore seeks a Deputy Director to lead the Maritime Cyber Assurance and Operations Centre (MCAOC), ensuring 24/7 protection of MPA digital systems and cybersecurity across port operations, vessels, and IT/OT environments.

The role drives cyber defense, SOC strategy, incident response, and resilience, working with industry partners, government agencies, and international bodies to counter evolving threats and safeguard national maritime interests.

Qualifications

• 12-15+ years in cybersecurity with leadership experience in SOC operations.
• Experience in government or critical infrastructure cybersecurity is a plus.

Responsibilities

• Provide executive leadership for 24/7 MCAOC operations and incident response.
• Develop and execute SOC strategy with AI-driven analytics and threat intelligence.
• Oversee incident response playbooks, risk management and resilience planning.
• Lead investigations, vulnerability assessments and remediation for maritime systems.
• Deliver dashboards on SOC metrics to CISO and national stakeholders.
• Foster partnerships with industry, government, and international ports.

Skills

SOC operations leadership

Executive communication

IT/OT convergence

Incident management

Threat intelligence

Education

Cybersecurity degree

Computer Science degree

Tools

SIEM

EDR

NDR

SOAR

Threat intelligence platforms

Job description

What the role is:

The Deputy Director of Cybersecurity Analysis and Operations Department leads the strategic and operational direction of MPA’s Maritime Cyber Assurance and Operations Centre (MCAOC), ensuring 24/7 protection of MPA digital systems. This executive role drives cyber defense for port operations, vessels, onshore IT/OT systems, and national maritime resilience, collaborating with industry, government agencies, and international partners to counter evolving threats.

What you will be working on:

The key duties and responsibilities are to:

• Provide executive leadership for 24/7 MCAOC operations, including real-time threat monitoring, anomaly detection, incident response, and recovery for maritime IT/OT environments.
• Develop and execute security operations centre (SOC) strategy, integrating cyber threat intelligence, red teaming, threat hunting, and AI-driven analytics to safeguard port operations, vessels, and offshore assets.
• Establish and maintain cyber incident response frameworks, playbooks, and sectoral-level exercises (e.g., TTX simulations) for maritime critical information infrastructure (CII) protection.
• Oversee convergence of IT/OT cybersecurity requirements with Integrated Operations Centre, enterprise architecture, and CII owners for holistic risk management.
• Drive automation, SOAR, SIEM/EDR enhancements, and data linkages for early warning of cyber threats impacting navigational safety and business continuity.
• Lead investigations, vulnerability assessments, and remediation for MPA digital systems and CII partners, ensuring compliance with Singapore cybersecurity regulations and standards.
• Deliver executive dashboards and reports on SOC metrics (MTTD/MTTR), threat trends, and resilience posture to MPA CISO, leadership and national stakeholders.
• Foster partnerships with industry, research community, and international ports for information sharing and operational enhancements.
• Build and mentor a high-performing SOC team, emphasizing maritime-specific skills in OT/ICS security and Maritime Shipboard Operational Technology (MariOT) testbed training initiatives.

What we are looking for:

• Background in Cybersecurity, Computer Science, or related field.
• 12-15+ years in cybersecurity, with 7+ years leading SOC operations.
• Deep expertise in IT/OT convergence, CII protection, red teaming, and incident management.
• Proficiency in SIEM, EDR, NDR, SOAR, threat intelligence platforms, and cyber tools.
• Strong executive communication for board-level reporting and crisis leadership.
• Experience in Singapore government/critical infrastructure cybersecurity.

Preferred Qualifications

• Certifications: CISSP, CISM, GIAC (GCIH/GCIA), or equivalent.

Key Success Indicators

• Enhanced MTTD/MTTR and zero major incidents impacting port operations.
• High team maturity, retention, and contributions to sectoral and national cyber exercises

About Maritime and Port Authority of Singapore

"The Maritime and Port Authority of Singapore (MPA) was established on 2 February 1996, with the mission to develop Singapore as a premier global hub port and international maritime centre (IMC), and to advance and safeguard Singapore's strategic maritime interests.MPA is the driving force behind Singapore's port and maritime development, taking on the roles of Port Authority, Port Regulator, Port Planner, IMC Champion, and National Maritime Representative.MPA partners the industry and other agencies to enhance safety, security and environmental protection in our port waters, facilitate port operations and growth, expand the cluster of maritime ancillary services, and promote maritime R&D and manpower development."