IT Security Specialist (Governance)

Housing and Development Board; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

Housing & Development Board (HDB) in Singapore is seeking a dedicated ICT Security professional to design, operate and govern an enterprise-wide ICT security framework. You will establish policies, controls and governance to protect information assets and support policy-compliant, resilient IT operations.

You will lead governance for security programmes, awareness outreach, identity and access management, and regular security reviews, with a focus on risk management and industry best practices.

Qualifications

• At least 2 years of ICT security work experience.
• Preferably hold IT security certifications (CISSP, CRISC, CISM, CISA, CEH).
• Knowledge of IT security risks, controls, vulnerability assessments, and compliance.
• Familiar with IT controls frameworks (COBIT, ISO27001/2).
• Good written and spoken English.

Responsibilities

• Design, operate and govern enterprise ICT security governance framework.
• Establish policies, standards and controls for secure IT operations.
• Lead ICT security governance, awareness outreach and access management.
• Conduct quality security reviews and continual improvement.

Skills

ICT Security

Information Security

Cybersecurity

IT Governance

Risk Management

Vulnerability Assessment

Penetration Testing

Security Certification

Job description

What the role is:

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What you will be working on:

You will play a pivotal role in strengthening the organisation's cybersecurity posture by designing, operationalising, and governing a robust ICT governance framework across enterprise IT systems and programmes. This encompasses establishing clear policies, standards, and controls that ensure the secure, resilient, and compliant management of the organisation's technology landscape — enabling informed decision-making, accountability, and continuous improvement in an evolving threat environment.

• ICT Security Governance:
  • Develop and implement enterprise-wide ICT security programmes as follows:
  • i. Establish the cybersecurity governance structure for HDB to ensure that the security posture is robust, resilient, and pragmatic.
  • ii. Enhance and update the IT security policy, standards, procedures so that it stays relevant against the evolving cyber security landscape.
  • iii. Manage the compliance with Whole-of-Government (WOG) ICT/SS Security Policies, Initiatives, Measures and applicable Government Instruction Manual to further strengthen HDB ICT security posture.
  • iv. Establish the governance and administer the Third-Party Management Policy and Procedure.
• Cybersecurity Awareness Outreach
  • Manage and implement the Cybersecurity Awareness Framework to promote IT security awareness and outreach programme as follows:
  • i. Raise HDB management and staff's security awareness on the importance of ICT Security to ensure HDB's information assets are protected.
  • ii. Create good staff cyber security hygiene through regular ICT Security outreach programme such as the annual ICT Security Awareness Talk, security advisories, conducting Phishing exercises and road shows.
  • iii. Identify various channels for the conduct of the security program such as cyber range exercises, technical certification, gamification.
• Identity & Access Management
  • To establish procedures and standards for the Identity and Access management in HDB as follows:
  • i. To administer and manage the user accounts and privileged access to safeguard the confidentiality of ICT assets and systems in HDB.
  • ii. To setup, maintain and manage the access controls to HDB's applications.
  • iii. To manage the lifecycle of HDB's Digital Certificate.
• Quality Audit and Security Reviews
  • i. To serve as an independent party to ensure the conduct of quality auditing and report to Management on audits observations and recommendations.
  • ii. To conduct regular security reviews and compliance checks on HDB’s applications and infrastructure to maintain HDB ICT security posture.

You are also to keep pace of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities to recommend appropriate controls to improve HDB ICT security posture.

What we are looking for:

You will be a Great Fit if you:

• Possess a strong background and interest in ICT Security, Information Security, Information Technology, Computer Science, Engineering (Computing/Telecommunication), Cybersecurity and/or Digital Forensic or equivalent.
• Have strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.
• Have at least 2 years of direct and relevant full-time ICT security work experience.
• Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc.
• Added advantage for candidates with knowledge in any of the following:
• Domain knowledge on access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security.
• Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc).
• Good understanding of the current IT/Cyber Security landscape.

Good to Have:

• Good interpersonal and communication skills.
• Demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.
• Conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.
• Good command of written and oral English.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

About Housing and Development Board

We are Singapore's public housing authority and a statutory board under the Ministry of National Development. We take pride in creating homes and towns that form a quality living environment for the young and old. Throughout the years, our continuous innovation and upgrading programmes have ensured that the heartland remain our cherished home.Join us in making a difference to the heartlands and communities that matter to us. Take on the challenge of shaping the nation’s skyline and landscape. With the wide range of opportunities available in HDB, you play an integral part in redefining the future of public housing and improving the lives of Singaporeans.