IT Security Specialist (Risk Assessment)

Public Service Division; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Housing & Development Board (HDB) is seeking a cybersecurity professional to strengthen its Threat & Risk Assessment framework and risk posture across enterprise IT systems. You will design, operationalise, and govern risk assessment processes, collaborating with system owners and project teams to identify cyber risks early and drive mitigation strategies.

The role involves advising on project cybersecurity requirements, evaluating proposals, and conducting architecture reviews, SSATs, and

Qualifications

• Experience in Threat Modelling using MITRE ATT&CK and STRIDE.
• At least 2 years ICT security experience.
• Hands-on exposure to cybersecurity risk management, control assessment, security testing, compliance, and security best practices.
• Competencies in cloud security, including cloud architecture and Cloud Platform security controls (AWS/Azure).
• Knowledge of IT security principles and frameworks such as ISO/IEC 27001/27002, COBIT, and related.
• One or more relevant cybersecurity certifications (e.g., CISSP, CRISC, CISM, CISA, CCSP, OSCP, CEH).
• Foundational understanding of access control, network security, cloud security, governance and risk management, secure software development, cryptography, security operations, business continuity, regulatory considerations.

Responsibilities

• Design, operate, and govern Threat & Risk Assessment framework across IT systems and programmes.
• Conduct end-to-end cybersecurity risk assessments including threat identification, risk analysis, and control determination.
• Provide security advisory and consultancy to project teams on cybersecurity requirements and vendor submissions.
• Review cybersecurity architecture and perform SSAT and security assurance reviews.
• Embed security into system development, enhancement, and modernization initiatives.
• Promote IT security awareness and drive organisation-wide security culture.
• Monitor emerging threats and recommend pragmatic controls to improve security posture.
• Lead adoption of new technologies and security best practices across infrastructure, cloud, and applications.

Skills

Threat Modelling

MITRE ATT&CK

STRIDE

Cloud Security

Cloud Architecture

AWS/Azure Security

IT Security Governance

Security Certifications

Job description

[What the role is]

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving servicedeliveryand optimising operations

[What you will be working on]

You will play a key role in strengthening HDB’s cybersecurity and risk posture by designing, operationalising, and governing the Threat & Risk Assessment framework across enterprise IT systems and programmes. This roleprovidesthe opportunity to work closely with system owners, project teams, and senior stakeholders toidentifycybersecurity and data risks early, assess their impact, and drive effective risk mitigation strategies across the organisation.

What you will be working on:

• Develop,maintain, and operationalise HDB’s Threat & Risk Assessment framework to systematicallyidentify, assess, and mitigate ICT, cybersecurity, and data risks across IT systems and programmes.

• Conduct end ‑ to ‑ endcybersecurity risk assessments , including threat identification, risk analysis, control determination, and effectiveness reviews.

• Drive and support key cybersecurity functions, including:

• Cyber Security Assurance Programme

• Threat & Risk Assessment Framework

• Cyber & Data Security Risk Management

• Enterprise Risk Management (Cybersecurity)

• Provide security advisory and consultancy to project teams, including:

• Project‑specificcybersecurity requirements and specifications

• Evaluation of cybersecurity proposals and vendor submissions

• Cybersecurity architecture and design reviews

• System Security Acceptance Testing (SSAT) and security assurance reviews

• Partner stakeholders to embedsecurity ‑ by ‑ design into system development, enhancement, and modernisation initiatives.

• Manage and promote IT security awareness and outreach programmes to strengthenorganisation‑widesecurity culture.

• Monitor emerging cyber threats, vulnerabilities, and industry best practices , and recommend pragmatic controls to continuously improve the organisation’s security posture.

• Lead and/or contribute to the adoption ofnew technologiesand security best practices in infrastructure, cloud, and application security to address evolving risk landscapes.

[What we are looking for]

You will be aGreatFitif you have:

• Experience in ThreatModelling , using frameworks such as MITRE ATT&CK and/or STRIDE.

• At least 2 years of relevant ICT security experience.

• Hands‑onexposure to cybersecurity risk management, control assessment,securitytesting, compliance, and security best practices.

• Demonstrated competencies in cloud security , including cloud architecture , andCloud Platform (AWS, Azure)security controls.

• Knowledge of IT security principles, controls, and industry frameworks , such as IM8, COBIT, ISO/IEC 27001/27002 , or equivalent.

• Good awareness of the current and emerging cybersecurity landscape , threats, and trends.

• One or more relevant cybersecurity certifications such as CISSP, CRISC, CISM,CISA,CCSP, OSCP, CEH , or equivalent.

• Foundationalunderstanding of:

• Access control and identity management

• Network and telecommunications security

• Cloud security

• Cybersecurity and information security governance & risk management

• Secure software development

• Cryptography

• Security architecture and design

• Security operations and incident response

• Business continuity and disaster recovery planning

• Legal, regulatory, and compliance considerations

• Physical and environmental security

Good to Have:

• Good interpersonal and communication skills.

• Demonstratea strong senseof urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• Conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• Good command of written and oral English.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers