Senior Cybersecurity Consultant (Policy & Analytics), CIID

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Cyber Security Agency of Singapore (CSA) seeks a senior professional to strengthen governance of critical information infrastructure across government sectors. You will lead policy development, coordinate cross-agency risk management, and drive compliance with national cyber security standards.

As a senior member, you will supervise officers, engage with international partners, and report to cybersecurity leaders. The role includes opportunities to shape national risk strategy and mentor a team.

Qualifications

• 12–15 years of IT/OT in cybersecurity governance, risk management or compliance.
• Defence policy management experience is preferred.
• Relevant qualification in Politics or ICT-related discipline (Cyber/IT/CS/MIS, Science or Engineering).
• Strong technical skills in network, application, database and OS security.
• Certifications such as CISM, CRISC, CGEIT, CISA preferred; CISSP, GRID, GDAT, GDSA, GICSP desired.
• Self-motivated with ability to influence stakeholders at all levels.
• Excellent written and verbal communication skills.

Responsibilities

• Formulate and implement cybersecurity policies and code of practice.
• Direct, supervise and govern the CIIs within the framework.
• Engage regulators, international partners and think-tanks on risk management.
• Supervise officers and undertake managerial responsibilities where applicable.
• Interact with senior leaders in the cybersecurity space regularly.

Skills

Cybersecurity governance

Policy formulation

Risk management

Compliance

Analytical skills

Communication

Stakeholder management

Education

Political Science

Info-Communications Technology / Cyber / IT / CS / MIS / Science or Engineering

Tools

CISM

CRISC

CGEIT

CISA

CISSP

GIRD / GDAT / GDSA / GICSP

Job description

Critical Information Infrastructure (CII) Division works to strengthen the cybersecurity of our critical sectors in Government, Transport, Services and Utilities clusters. The team partners regulators and CII owners to strengthen the cyber resiliency of the Nation's CII against cyber threats and to ensure the continuity of the essential services.
Your work will be focused on enhancing the protection, detection, response and recovery capabilities of CII. You will be involved in directing, supervising and the administration of the cybersecurity governance and legislative framework, and engaging stakeholders on cyber risk management efforts and security measures. Experienced candidate will be exposed to engagement opportunities with foreign government cybersecurity agencies, international think-tanks and technical practice groups. As a senior member of the team, you will assist in the supervision and governance of the CIIs. If deemed suitable, you will undertake managerial responsibilities for a team of officers. There will also be opportunities for frequent interactions with senior leaders in the cybersecurity space.

Requirements

• Experience formulating and implementing cybersecurity policies and code of practice;
• Defence policy management experience or at least 12-15 years of Information Technology and/or Operational Technology in the area of cybersecurity governance, risk management, compliance and/or cyber consulting capacity;
• Relevant qualification in Political Science, Info-Communications Technology-related discipline (Cyber/Information Security, Information Technology, Computer Science, Management Information Systems), Science or Engineering;
• Strong technical skills in network defences, application, database and operating system security preferred cybersecurity assessment, cloud security, vulnerability assessment, penetration testing, incident management and IoT security are desired;
• Professional certifications such as CISM, CRISC, CGEIT, and CISA are preferred; CISSP, GRID, GDAT, GDSA and GICSP are desired;
• Self-motivated with strong analytical skills to deal with complex issues and influence internal and external stakeholders to achieve targeted outcomes;
• Possess excellent written, presentation and communication skills with the ability to build effective and strong working relationships at all levels