Security Consultant (Contract)

sggovterp; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

MAS is seeking a Security Consultant to lead a multi‑year quantum‑safe migration programme, coordinating cross‑functional teams and reporting to leadership.

You will drive governance, agile delivery and risk management while engaging with vendors, contracts and regulatory requirements to strengthen Singapore's security posture.

Qualifications

• Experience leading complex cybersecurity projects and programmes.
• Ability to manage cross‑functional teams and stakeholders.

Responsibilities

• Lead cybersecurity projects across MAS with multi-year scope.
• Oversee vendor evaluations, SLAs, and procurement.
• Maintain integrated delivery plans, backlogs and governance.
• Coordinate with governance bodies and provide executive reporting.
• Apply agile methodologies to improve delivery flow and transparency.
• Align stakeholders across business, technology, legal, risk and operations.
• Define service vision and roadmap for quantum-safe capabilities.

Skills

Project management

Cybersecurity

Agile delivery

Vendor management

Job description

What the role is

As a Security Consultant, you will drive and deliver a multi-year quantum-safe migration programme across MAS.

Working with cross‑functional stakeholders, you will define scope, manage schedules and dependencies, track risks and issues, and report progress to leadership.

What you will be working on

Cybersecurity Project Management

• Lead and manage cybersecurity projects across the organisation, including tool implementation, process improvements, and compliance initiatives
• Collaborate with business units to ensure successful delivery and adoption whilst managing multiple workstreams, timelines, and dependencies
• Track project milestones, risks, budgets, and provide strategic reporting to enhance organisational security posture

Vendor & Contract Management

• Manage cybersecurity vendors including awareness platforms, incident response partners, and security solution providers
• Oversee contract renewals, performance reviews, SLAs, and procurement processes whilst ensuring compliance with internal and regulatory requirements
• Conduct comprehensive vendor evaluations, manage security clearance requirements, and coordinate procurement processes

Governance, Programme and Agile Delivery

• Lead complex, multi-year technology delivery across MAS, aligned with business objectives and approved scope, budget, timelines and risk appetite.
• Act as programme secretariat and delivery lead for steering committees and workstreams, with clear terms of reference, decision rights, ownership, governance cadences and escalation paths.
• Maintain integrated delivery plans, Agile backlogs, decision records, financial and resource forecasts, action tracking and executive reporting.
• Apply fit-for-purpose Agile methods, tools, ceremonies and metrics to improve delivery flow, transparency, quality and continuous improvement while meeting MAS governance and assurance requirements.
• Facilitate architecture, risk, funding and delivery forums, presenting options, dependencies, impacts and recommendations to support timely decisions.
• Align business, technology, cybersecurity, procurement, legal, risk, audit and operations stakeholders around outcomes, user needs and acceptance criteria, removing barriers across teams.

Requirements, Service Design and Migration Planning

• Elicit, analyse, scope and manage business, technical, security and operational requirements, translating them into prioritised user stories, technical specifications and measurable acceptance criteria.
• Define the service vision, target operating model, delivery strategy and roadmap for quantum-safe capabilities using service-design and user-centred approaches where appropriate.
• Maintain an integrated dependency map covering business services, applications, infrastructure, data flows, cryptographic assets, certificates, keys, protocols, libraries, hardware, third parties and change windows.
• Maintain a risk‑based quantum migration register considering data sensitivity and retention, "harvest now, decrypt later" and "trust now, forge later" exposure, business criticality, algorithm and key usage, vendor readiness and remediation complexity.
• Translate the cryptographic inventory into prioritised migration waves, release plans, resource forecasts, budgets and cutover schedules, tracking remediation from discovery through decommissioning.
• Plan for crypto‑agility, interoperability, rollback, business continuity and approved coexistence or hybrid approaches, with accountable owners, evidence, exceptions and residual‑risk acceptance.

Procurement, Vendor and Supply‑Chain Management

• Obtain, assess and periodically refresh supplier PQC roadmaps, supported algorithms, implementation timelines, product dependencies, upgrade paths and end‑of‑support dates.
• Coordinate proofs of concept and interoperability, performance, resilience and security testing before production adoption.
• Identify concentration, lock‑in and supply‑chain risks, maintaining contingency options where vendor readiness may affect critical milestones.

Standards, Policy and Horizon Scanning

• Monitor authoritative quantum‑safe guidance and standards, including relevant Singapore guidance, NIST PQC standards and transition guidance, and applicable IETF protocol specifications.
• Maintain a standards watchlist distinguishing final standards from drafts and recording applicability, maturity, implementation implications and required programme decisions.
• Translate regulatory, policy, standards and industry developments into architecture guardrails, information‑security controls, procurement requirements, migration patterns, backlog changes and stakeholder briefings.
• Benchmark deployment practices and lessons from financial services and critical infrastructure without treating emerging or draft guidance as approved production standards.
• Ensure delivery aligns with MAS quality management systems, information‑security policies, technology risk requirements and relevant industry standards.

Technical Delivery, Assurance and Aut

• Technical Delivery, Assurance and Aut