Senior Assistant Director (Protective DNS), Safer Cyberspace Division

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

The Safer Cyberspace Division within the Cyber Security Agency of Singapore leads national cybersecurity initiatives to raise resilience among SMEs, NPOs, and critical organisations. It drives multi-year programs, governs budgets, and collaborates with government bodies, industry partners, and auditors to ensure high-quality delivery and measurable impact.

With 8–12+ years in cybersecurity and 5+ years in leadership, you will steer risk management, architecture reviews, and compliance with

Qualifications

• 8 to 12+ years in Cybersecurity, Technology Risk, or Enterprise IT.
• At least 5 years in a leadership or senior project management role.
• Experience managing multi-million-dollar cybersecurity or digital transformation projects.
• Solid understanding of cybersecurity controls, cloud security, and security architecture principles.
• Familiar with government procurement guidelines and local cybersecurity standards.
• Exceptional executive stakeholder management with C‑level communication.

Responsibilities

• Drive national adoption by raising cybersecurity readiness among SMEs and NPOs across Singapore.
• Direct and mentor a multidisciplinary team of project managers, technical specialists, and external implementation partners to meet national cybersecurity objectives.
• Oversee end-to-end project governance, scope, milestones, and ROI for multi-year programs.
• Provide security architecture reviews and pragmatic risk mitigation aligned with national frameworks.

Skills

Leadership

Executive communication

Budget management

Vendor management

Cybersecurity

Education

CISSP

CISM

CRISC

CISA

Job description

The Safer Cyberspace Division in CSA focuses on building national cyber resilience of organisations in Singapore. The Division develops and manages national cybersecurity technology initiatives under the SG Cyber Safe programme, in order to enable a safer cyberspace. Examples of programmes which the Division has rolled out include the CSA Cyber Essentials and Cyber Trust mark, which are published as national cybersecurity standards in Singapore. The target segment of the Division are Entities of Special Cybersecurity Interest (ESCI) regulated under the Cybersecurity Act and non-Critical Information Infrastructure (CII) organisations in Singapore, and these can range from large or significant organisations to Small and Medium Enterprises (SMEs), which form 99% of Singapore’s economy.

1. Program Leadership & Strategy

• Drive National Adoption: Lead and execute strategic initiatives to raise the cybersecurity readiness and hygiene of SMEs and NPOs across Singapore.
• Team Leadership: Direct and mentor a multidisciplinary team of project managers, technical specialists, and external implementation partners to meet national cybersecurity objectives.

2. Project & Financial Governance

• End-to-End Project Management: Establish project scope, milestones, deliverable schedules, and governance structures for multi-year cybersecurity capability programs.
• Budget & Resource Allocation: Oversee project financing, vendor procurement, budget forecasting, and resource deployment to maximize program ROI and operational efficiency.

3. Technical & Architecture Guidance

• Security Architecture Reviews: Conduct technical and architectural assessments for solutions and frameworks deployed to or adopted by SMEs and NPOs.
• Pragmatic Risk Mitigation: Ensure recommended security baselines align with recognized national/international frameworks (e.g., Cyber Essentials, Cyber Trust marks, NIST CSF) while remaining accessible and actionable for smaller organizations.

4. Stakeholder & Ecosystem Engagement

• Cross-Sector Collaboration: Partner closely with internal statutory divisions, government agencies, trade associations, chambers of commerce, and NPO umbrella bodies.
• Vendor & Partner Management: Oversee external technology vendors, solution providers, and auditors to ensure high-quality delivery and service level compliance.

Requirements

• 8 to 12+ years in Cybersecurity, Technology Risk, or Enterprise IT, with at least 5 years in a leadership or senior project management role.
• Proven ability to manage multi-million-dollar cybersecurity or digital transformation projects, including budget management and vendor procurement.
• Solid understanding of cybersecurity controls, cloud security, endpoint defense, and security architecture principles suitable for mid-market and non-profit environments.
• Familiarity with government procurement guidelines, cybersecurity risk management frameworks, and local cybersecurity standards (e.g., Cyber Essentials, MAS TRM, or WOG/IM8).
• Exceptional executive stakeholder management skills, capable of explaining complex cybersecurity concepts to C-Suite, board members, and non-technical SME/NPO leaders.
• CISSP, CISM, CRISC, CISA certification.