Senior Cyber Risk & Governance Lead

Government Technology Agency; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

A government agency in Singapore is seeking a Cyber Security Governance Architect to oversee the Ministry's security governance and risk management framework. Applicants should have 10–12 years of experience in Cybersecurity GRC or Security Architecture, with strong knowledge of Singapore Government security policies and risk assessment methodologies. This role focuses on establishing risk management frameworks, maintaining security standards, and fostering a proactive risk-management culture across agencies.

Benefits

Strong learning and development opportunities

Purposeful career

Holistic rewards approach

Qualifications

• 10–12 years in Cybersecurity GRC, Information Security Risk Management, or Security Architecture.
• Proven experience managing risks across IT and Cloud environments.
• Deep familiarity with Singapore Government security policies and international standards.

Responsibilities

• Establish and oversee a living Ministry-wide security risk register.
• Maintain Ministry-wide standards for Threat Risk Assessment.
• Lead a Ministry-wide Zero Trust Framework.
• Establish a framework to manage risks across software supply chains.
• Shift agencies to continuous compliance and readiness.
• Partner with senior CIOs and CISOs to inculcate a proactive risk-management mindset.

Skills

Risk assessment methodologies

Zero Trust Architecture

Technical controls mapping

Manual and automated testing tools

Professional certifications (CISM, CRISC, etc.)

Job description

A government agency in Singapore is seeking a Cyber Security Governance Architect to oversee the Ministry's security governance and risk management framework. Applicants should have 10–12 years of experience in Cybersecurity GRC or Security Architecture, with strong knowledge of Singapore Government security policies and risk assessment methodologies. This role focuses on establishing risk management frameworks, maintaining security standards, and fostering a proactive risk-management culture across agencies.