IT Security Specialist (Risk Assessment)

HDB Housing & Development Board; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

HDB Housing & Development Board is seeking a cybersecurity professional to strengthen its threat and risk posture by designing, operationalising, and governing the Threat & Risk Assessment framework across enterprise IT systems and programmes. You will work closely with system owners, project teams, and senior stakeholders to identify cyber risks early and drive effective risk mitigation.

The role combines hands-on risk assessment, security advisory, and governance across cloud, on-premise, and

Qualifications

• Experience in Threat Modelling with MITRE ATT&CK and STRIDE.
• Hands-on cybersecurity risk management and security testing.
• Knowledge of cloud security and security controls on AWS/Azure.
• Familiarity with IT security principles and industry frameworks (ISO 27001/27002, COBIT).

Responsibilities

• Develop, maintain, and operationalise the Threat & Risk Assessment framework across IT systems and programmes.
• Conduct end-to-end cybersecurity risk assessments, including threat identification, risk analysis, control determination, and effectiveness reviews.
• Drive and support key cybersecurity functions: Cyber Security Assurance Programme, Threat & Risk Assessment Framework, Cyber & Data Security Risk Management, Enterprise Risk Management (Cybersecurity).
• Provide security advisory and consultancy to project teams, including cybersecurity requirements and evaluation of proposals.
• Embed security-by-design into system development, enhancement, and modernisation initiatives.
• Promote IT security awareness and outreach programmes to strengthen organisation-wide security culture.
• Monitor emerging cyber threats, vulnerabilities, and industry best practices; recommend pragmatic controls to improve security posture.
• Lead/adopt new technologies and security best practices in infrastructure, cloud, and application security.

Skills

Threat modelling

MITRE ATT&CK

STRIDE

Cloud security

Security governance & risk management

Security testing

IT security principles & frameworks

Security certifications

Access control & identity management

Network security

Secure software development

Cryptography basics

Tools

AWS

Azure

Job description

What the role is

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving servicedeliveryand optimising operations

What you will be working on

You will play a key role in strengthening HDB’s cybersecurity and risk posture by designing, operationalising, and governing the Threat & Risk Assessment framework across enterprise IT systems and programmes. This roleprovidesthe opportunity to work closely with system owners, project teams, and senior stakeholders toidentifycybersecurity and data risks early, assess their impact, and drive effective risk mitigation strategies across the organisation.

What you will be working on:

• Develop,maintain, and operationaliseHDB’s Threat & Risk Assessment framework to systematicallyidentify, assess, and mitigate ICT, cybersecurity, and data risks across IT systems and programmes.

• Conductend‑to‑endcybersecurity risk assessments, including threat identification, risk analysis, control determination, and effectiveness reviews.

• Drive and support key cybersecurity functions, including:

• Cyber Security Assurance Programme

• Threat & Risk Assessment Framework

• Cyber & Data Security Risk Management

• Enterprise Risk Management (Cybersecurity)

• Providesecurity advisory and consultancyto project teams, including:

• Project‑specificcybersecurity requirements and specifications

• Evaluation of cybersecurity proposals and vendor submissions

• Cybersecurity architecture and design reviews

• System Security Acceptance Testing (SSAT) and security assurance reviews

• Partner stakeholders toembedsecurity‑by‑designinto system development, enhancement, and modernisation initiatives.

• Manage and promoteIT security awareness and outreach programmesto strengthenorganisation‑widesecurity culture.

• Monitor emergingcyber threats, vulnerabilities, and industry best practices, and recommend pragmatic controls to continuously improve the organisation’s security posture.

• Lead and/or contribute to theadoption ofnew technologiesand security best practicesin infrastructure, cloud, and application security to address evolving risk landscapes.

What we are looking for

You will be aGreatFitif you have:

• Experience inThreatModelling, using frameworks such asMITRE ATT&CK and/or STRIDE.

• At least2 years of relevant ICT security experience.

• Hands‑onexposure tocybersecurity risk management, control assessment, securitytesting, compliance, and security best practices.

• Demonstrated competencies incloud security, includingcloud architecture, andCloud Platform (AWS, Azure)security controls.

• Knowledge ofIT security principles, controls, and industry frameworks, such asIM8, COBIT, ISO/IEC 27001/27002, or equivalent.

• Good awareness of thecurrent and emerging cybersecurity landscape, threats, and trends.

• One or more relevant cybersecurity certifications such asCISSP, CRISC, CISM,CISA,CCSP, OSCP, CEH, or equivalent.

• Foundationalunderstanding of:

• Access control and identity management

• Network and telecommunications security

• Cloud security

• Cybersecurity and information security governance & risk management

• Secure software development

• Cryptography

• Security architecture and design

• Security operations and incident response

• Business continuity and disaster recovery planning

• Legal, regulatory, and compliance considerations

• Physical and environmental security

Good to Have:

• Good interpersonal and communication skills.

• Demonstratea strong senseof urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• Conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• Good command of written and oral English.