Senior / Cybersecurity Consultant (Cyber Exercise Planner), JORD

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

CSA is seeking a highly motivated professional to design, plan, and execute national-level and sector-wide cybersecurity exercises. The role builds a cyber exercise ecosystem to strengthen preparedness, coordination, and operational maturity across government, critical infrastructure operators, and industry partners.

You will help develop multi-tiered exercise programmes, including tabletop, command post/functional, and live-fire cyber range activities.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Public Policy, or related field.
• 2+ years of experience in cybersecurity operations, incident response, crisis management, or national security.
• Experience managing complex multi-stakeholder projects.
• Strong facilitation, communication, and stakeholder management skills.
• Ability to translate complex cyber risks into actionable readiness outcomes.

Responsibilities

• Design and operationalise a national or sector-wide cyber exercise ecosystem.
• Develop exercise roadmaps aligned to cybersecurity strategies.
• Lead end-to-end planning and execution of multiple exercise formats.
• Develop realistic cyber threat scenarios informed by threat intelligence.
• Produce post-exercise reports with actionable recommendations.
• Coordinate engagement with government agencies, critical infrastructure sectors, and industry partners.
• Track remediation and capability uplift across stakeholders.

Skills

Stakeholder management

Facilitation

Strategic thinking

Communication

Briefing

Project management

Crisis management

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Public Policy, International Relations, or related field

Tools

Threat intelligence platforms

Cyber ranges

Job description

We are seeking a highly motivated and strategically minded professional to design, plan, and execute national-level and sector-wide cybersecurity exercises. This role will assist with the development of a comprehensive cyber exercise ecosystem that strengthens the preparedness, coordination, and operational maturity of stakeholders across government, critical infrastructure operators, and industry partners. The successful candidate will assist with the development of multi-tiered exercise programmes spanning crisis management tabletop exercises (TTX), command post / functional exercises, and technical live-fire cyber range activities. The role requires strong stakeholder management, cyber domain knowledge, strategic thinking, and the ability to translate complex cyber risks into meaningful readiness outcomes.

Cyber Exercise Strategy & Programme Development

• Design and operationalise a national or sector-wide cyber exercise ecosystem
• Assist to develop exercise roadmaps aligned to organisational or national cybersecurity strategies
• Build progressive exercise pathways that uplift stakeholder maturity
• Establish exercise objectives, governance structures, success metrics, and evaluation frameworks
• Lead the end-to-end planning and execution of multiple exercise formats
• Assist to develop realistic cyber threat scenarios informed by current threat intelligence, emerging attack trends, sector-specific risks, and geopolitical developments
• Integrate cyber-physical, supply chain, and multi-domain crisis elements where relevant

Stakeholder Engagement & Coordination

• Engage government agencies, critical infrastructure sectors, industry operators, and international partners
• Facilitate workshops, planning conferences, and exercise briefings
• Build trusted relationships across technical, operational, and executive stakeholder groups
• Coordinate exercise participation across diverse organisations and maturity levels

Exercise Evaluation & Capability Development

• Assist to develop exercise evaluation methodologies and after-action review processes
• Identify operational gaps, policy issues, capability shortfalls, and systemic risks
• Produce post-exercise reports with actionable recommendations
• Track remediation efforts and long-term capability uplift across stakeholders
• General Degree, preferably one in Cybersecurity, Information Security, Computer Science, Public Policy, International Relations, or related field
• 2+ years of experience in one or more of the following: Cybersecurity operations, Incident response, Cyber exercise planning, Crisis management, National security, Business continuity
• Experience managing complex multi-stakeholder projects
• Strong understanding of cybersecurity operations and incident response workflows
• Excellent facilitation, communication, and stakeholder management skills

Preferred Experience & Desired Attributes

• Experience designing or participating in cyber exercises, simulations, or war games
• Familiarity with national cybersecurity frameworks or critical infrastructure environments
• Experience with cyber ranges, adversary simulation, or red teaming
• Understanding of crisis management structures and emergency response coordination
• Knowledge of OT/ICS cybersecurity is advantageous
• Strategic thinker with strong systems-level perspective
• Able to engage both senior executives and technical operators
• Comfortable operating in ambiguous and fast-moving environments
• Strong writing, facilitation, and briefing skills
• Collaborative and mission-driven mindset