[PUB-IDTD] Sr/Cybersecurity Analyst, Governance, Compliance and Audit

PUB, Singapore's National Water Agency; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

PUB, Singapore's National Water Agency, is seeking a cybersecurity compliance and governance professional to strengthen IT/OT security across the organisation. The role involves enforcing information security policies, managing risk, and supporting audit activities to ensure regulatory alignment.

You'll work with both technical teams and business stakeholders to translate security requirements into practical controls, and contribute to ongoing awareness and improvement of PUB's cyber posture in

Qualifications

• Bachelor’s degree in a technical field or equivalent.
• Strong understanding of cybersecurity controls, best practices, and governance frameworks.
• Ability to translate technical risks to business stakeholders for informed decisions.
• Professional certifications (e.g., GIAC, CISSP, CISA, CISM) are advantageous.

Responsibilities

• Governance and policy: ensure and enhance governance, resilience, and integrity of IT/OT systems; enforce policies and standards.
• Risk management: advise on risk prioritisation and translate security deficiencies into business risks.
• Compliance and documentation: monitor controls and maintain security documentation (BIA, SSP, risk assessments).
• Audit and reporting: generate cybersecurity reports; support internal and external audits.

Skills

Governance

Risk management

Compliance

Audit

Stakeholder communication

Education

Bachelor’s Degree in Electrical/Electronic or Computer Engineering, Information Systems, Computer Science

Job description

What The Role Is

This role is with the InfoTech & Digital Transformation Department at PUB

What The Role Is

This role is with the InfoTech & Digital Transformation Department at PUB

What You Will Be Working On

Governance and Policy

• Ensure and continuously enhance the governance, resilience, and integrity of PUB's IT and OT systems against evolving cyber threats
• Communicate, implement, and enforce information security policies, standards, and procedures in accordance with best practices and regulatory requirements from CSA and GovTech
• Promote a cyber-vigilant culture across PUB through awareness campaigns
• Leverage automation tools and streamlined processes to facilitate consistent compliance with cybersecurity policies

Risk Management

• Advise senior management on risk prioritisation, the consequences of various risk management strategies, and the effectiveness of specific security measures
• Translate technical security deficiencies into business risks that are clearly understood by non-technical stakeholders, in order to secure buy-in for security investments
• Develop and maintain risk management and mitigation plans for both IT and OT environments

Compliance and Documentation

• Monitor the effectiveness of security controls, and ensure compliance with documented standards, policies, and procedures
• Monitor and track risk mitigation measures and enforce compliance with cybersecurity policies
• Ensure PUB has developed, documented, and kept current its Business Impact Analysis, System Security Plans, Risk Assessments, Risk Treatment Plans, and other information security documentation

Audit and Reporting

• Generate cybersecurity hygiene and audit reports for PUB Senior Management and relevant stakeholders
• Support and manage various internal and external audit activities from planning through to remediation
• Identify systemic weaknesses surfaced through audit findings and propose feasible solutions to address them, ensuring root causes are addressed with substantive fixes

Requirements

What we are looking for

• Bachelor's Degree in Electrical/Electronic or Computer Engineering, Information Systems, Computer Science, or an equivalent discipline
• Strong understanding of cybersecurity controls, best practices, technology processes, risk assessments, and cybersecurity policies (e.g. Cybersecurity Code of Practice for CII, Instruction Manual on IT Management)
• Ability to work effectively across both technical teams and business stakeholders
• Prior relevant experience related to IT or OT cybersecurity is advantageous
• Professional certifications such as GIAC, CISSP, CISA, or CISM are advantageous