[LTA-PT] MANAGER/DEPUTY MANAGER, TICKETING SYSTEM & GOVERNANCE (GOVERNANCE, RISK & COMPLIANCE)

LTA Land Transport Authority; Singapore; Sur place; SGD 120 000 - 190 000; Plein temps

Résumé du poste

LTA Land Transport Authority seeks a Deputy/Manager for Transit Ticketing System governance to lead security, risk and compliance across the public transit fare system used in Singapore. You will own governance ownership, drive controls, and collaborate with internal teams and contractors to sustain system integrity and trust.

Responsibilities include enforcing data protection policies, monitoring cybersecurity controls, and coordinating audits and incident responses to minimize service

Qualifications

• Knowledge of computer science, engineering or information technology and cyber security.
• Experience in cyber security operations and incident management.
• Understanding of information security and data protection principles.
• Familiarity with ISO 27001, PDPA and PCI-DSS security standards.
• Strong communication and stakeholder management skills.

Responsabilités

• Maintain governance framework for Transit Ticketing System security, risk and compliance, guiding operations and ensuring availability and integrity.
• Oversee cybersecurity and data protection governance, monitor controls, and report KPIs to management.
• Support audits, risk assessments and action plans; track mitigation of security and privacy risks.
• Lead incident management including detection, containment, eradication and recovery, with root cause analysis.
• Promote cybersecurity awareness and staff training across teams and contractors.

Connaissances

Cyber security operations

Incident management

Data protection

ISO 27001

PDPA

PCI-DSS

Stakeholder management

Description du poste

What the role is

[LTA-PT] DEPUTY/MANAGER, TICKETING SYSTEM & GOVERNANCE (GOVERNANCE, RISK & COMPLIANCE)

What you will be working on

Become a catalyst for effective system ownership, operations and governance as a Transit Ticketing System and Governance officer! Are you passionate about optimising public service delivery and making a difference? Join our team and take a lead role in maintaining, enhancing and governing the transit ticketing system to maintain commuter trust, strengthen people-centric service delivery and ensure a future-ready public transport transit ticketing system that provides seamless fare payment services. Transit ticketing system is an integrated fare collection and contactless smart card payment system that enables commuters to pay for their public transport journeys across Singapore and consists of frontend system (MRT/LRT fare gates, bus fare readers, top up machines devices and applications) and backend system (servers, network, infrastructure and applications).

Responsibilities

Governance Framework

• Maintain oversight of Transit Ticketing System security, risk management and compliance in the role of operations lead supporting the system owner, to ensure the confidentiality, integrity, and availability of systems, in accordance with regulatory and organisational governance requirements.
• Maintain the governance framework and ensure its operational effectiveness by overseeing process, metrics, audit and risk management reports by internal and external stakeholders, to achieve the framework’s objectives and perform commuter, operational and financial impact assessment to mitigate risk, minimize service disruption and improve commuter experience.

Cybersecurity and Data Protection Governance

• Enforce cybersecurity and data protection policies, standards, and procedures aligned with government IM8 requirements and industry standards such as ISO 27001, NIST and PCI-DSS.
• Collaborate with internal technical cyber security team and contractors to monitor the effectiveness of cybersecurity and controls of IT infrastructure, cloud services, network and applications in transit ticketing system.
• Establish key metrics (KPIs) on cyber security and data protection and review report submitted by contractors and periodically update to senior management.

Compliance and Risk Management

• Review cybersecurity policy developed by the technical security team and enforce compliance.
• Support internal and external audits and assessments related to cybersecurity and data protection and assess commuter, operational and financial impact and ensure closure of audit action plan.
• Maintain a register of risks related to information security and data protection, and track mitigation plans.
• Collaborate with technical cyber security teams to ensure internal delivery teams and third-party service providers meet security and privacy requirements for transit ticketing system.
• Oversee data protection measures and access controls of transit ticketing system.

Incident Management

• Manage cybersecurity and data protection incidents including detection, analysis, containment, eradication, and recovery.
• Review incident management report and post-incident reports, assess root cause analysis conducted by technical security team and contractors, and coordinate implementation of corrective/preventive actions.
• Coordinate with required stakeholders for incident response, business continuity and disaster recovery.

Awareness and Training

• Collaborate with technical cyber security team to implement cybersecurity and data privacy awareness programs, including phishing simulations and incident response tabletop exercises.
• Support staff training on cyber security, secure data handling, breach prevention, and compliance obligations.

What we are looking for

• Knowledge in computer science, engineering or information technology, cyber security.
• Candidates with proven experience in managing cyber security and data protection operations and incident management.
• Strong understanding of information security and data protection principles, ISO 27001, PDPA, PCI-DSS Security Standards and cloud security standards.
• Strong incident response, good communication, situational awareness and stakeholder management skills.
• Ability to analyze complex problems and recommend practical solutions.

As part of the shortlisting process for the role, you may be required to complete a medical declaration and / or undergo further assessment.

http://jobs.careers.gov.sg

The Singapore Public Service plays a key role in the economic growth, progress and stability of Singapore by formulating and implementing government policies, as well as providing key public services.

Whether you are a fresh graduate joining the workforce or an experienced professional, the Singapore Public Service offers a great variety of job opportunities for you.

The work in the Public Service can be broadly categorised into the following sectors: Economic, Social, Security & External Relations, and Administration & Corporate Development.

Be part of the team that shapes the future of Singapore.