Engineer - Senior Principal Engineer (Cyber Security Branch)

Energy Market Authority; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Energy Market Authority in Singapore leads the power sector's cybersecurity oversight, focusing on regulatory assurance for critical information infrastructure and OT environments.

You will assess risks, review security measures, and coordinate with CSA and other agencies to strengthen cyber resilience in Singapore's power sector.

Qualifications

• Relevant qualifications in cybersecurity, information security, computer science, or related fields.
• Preferably 2+ years of relevant experience in cybersecurity or IT risk; fresh graduates with qualifications are welcome.
• Good understanding of cyber risk management, vulnerabilities, security controls and common threats.
• Able to analyse risks and work with engineers/technical specialists to mitigate.
• Familiarity with assessments, vulnerability management, testing or incident response is an advantage.
• Knowledge of OT, industrial control systems, CII is an advantage.
• Certifications in cybersecurity or OT security are an advantage.
• Keen interest in OT cybersecurity and power sector.

Responsibilities

• Review cybersecurity risks, vulnerabilities, audit/ remediation findings for power-sector CIIs.
• Review measures implemented by CII owners, including OT environments.
• Conduct/ support assurance activities, including site visits to CIIs.
• Review assessments and testing by CII owners/service providers and shape scope based on risks.
• Monitor significant findings and coordinate remediation with stakeholders.
• Support implementation of cybersecurity regulatory requirements and national initiatives.
• Monitor emerging threats and assess implications for power-sector CIIs.
• Support cybersecurity exercises, incident preparedness and response with CSA/ agencies.
• Contribute to development of cybersecurity policies and sector initiatives.

Skills

Cybersecurity risk management

Vulnerability assessment

Security controls

OT cybersecurity knowledge

Analytical thinking

Stakeholder management

Communication skills

Education

Bachelor's degree in cybersecurity, information security, computer science, or related fields

Job description

What the role is:

About the job

The key scope of work for the position is to support EMA’s role as Sector Lead for the power sector in the regulatory oversight and cybersecurity assurance of power-sector Critical Information Infrastructure (CII). This includes assessing cybersecurity risks and measures, reviewing cybersecurity assessments and testing, monitoring the remediation of significant cybersecurity findings, and supporting sector-level cybersecurity initiatives.

The position will also work with CII owners, technical specialists, the Cyber Security Agency of Singapore (CSA) and other stakeholders to strengthen the cyber resilience of Singapore’s power sector. The role provides opportunities to develop expertise in Operational Technology (OT) cybersecurity, CII regulation and power-sector cyber resilience.

What you will be working on:

Cybersecurity Risk and Assurance

• Review cybersecurity risks, vulnerabilities, audit and assessment findings, and remediation plans of power-sector CIIs.
• Review and assess cybersecurity measures implemented by CII owners, including those relating to OT environments.
• Conduct and support cybersecurity assurance activities, including site visits to power-sector CII facilities, to assess cybersecurity measures and follow up on significant findings.
• Review cybersecurity assessments and testing undertaken by CII owners and their service providers, and work with technical specialists to shape the scope and focus of such activities based on identified risks.
• Monitor significant cybersecurity findings and work with CII owners and relevant stakeholders on appropriate remediation and risk mitigation measures.

Cybersecurity Regulatory and Sector Initiatives

• Support the implementation of cybersecurity regulatory requirements and national cybersecurity initiatives for the power sector.
• Monitor emerging cyber threats and technology developments and assess their potential implications for power-sector CIIs.
• Support cybersecurity exercises, incident preparedness and response, including coordination with CII owners, CSA and other relevant government agencies.
• Contribute to the development of cybersecurity policies and sector-level initiatives to strengthen the cyber resilience of Singapore’s power sector.

What we are looking for:

Requirements:

• Relevant qualifications in cybersecurity, information security, computer science, computer engineering, electrical/electronic engineering or related fields.
• Preferably at least 2 years of relevant experience in cybersecurity, information security, technology risk, IT audit or related functions. Candidates with no prior experience but with relevant qualifications and a strong interest in cybersecurity are also welcome to apply.
• Good understanding of cybersecurity fundamentals, including cyber risk management, vulnerabilities, security controls and common cyber threats.
• Strong ability to analyse cybersecurity risks and findings and work with engineers and technical specialists to develop appropriate risk mitigation measures.
• Familiarity with cybersecurity assessments, vulnerability management, security testing or incident response would be an added advantage.
• Experience or knowledge of OT, industrial control systems, CII or other operationally critical environments would be an added advantage.
• Relevant professional certifications in cybersecurity, technology risk, audit, governance or OT cybersecurity would be an added advantage.
• Keen interest in OT cybersecurity, CII protection and the power sector.
• Strong analytical, communication and stakeholder management skills.

About Energy Market Authority

The Energy Market Authority (EMA) is statutory board under the Singapore Ministry of Trade and Industry (MTI). Through our work, we seek to build a clean energy future that is resilient, sustainable and competitive. We aim to ensure a reliable and secure energy supply, promote effective competition in the energy market and develop a dynamic energy sector in Singapore.At EMA, we are dedicated to fostering a culture of innovation, collaboration, continuous learning and employee well-being. Joining us means embarking on a meaningful career where you will be part of a transformative journey towards a clean energy future, experiencing a unique adventure of discovery and growth.We empower our people to drive innovation at every level Our open culture encourages teams to embrace diverse perspectives, enabling you to push beyond the status quo We are committed to energising your growth through ample opportunities for skill development. helping you become an expert in your field and a valuable asset to the energy industry.You also stand to enjoy a comprehensive suite of benefits which are designed to meet your needs and prioritise your holistic well-being.Visit: www.ema.gov.sg for more information.