Senior Cybersecurity Consultant (Policy & Analytics), CIID

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Cyber Security Agency of Singapore (CSA) invites a seasoned professional to join the Critical Information Infrastructure (CII) Division to strengthen protection, detection, response and recovery capabilities. You will direct cybersecurity governance and engage regulators, CII owners, and international partners to elevate cyber risk management practices.

As a senior team member you may supervise CIIs, take on managerial duties, and interact frequently with senior leaders in the cybersecurity

Qualifications

• Experience formulating and implementing cybersecurity policies and code of practice.
• Defence policy management experience or at least 12–15 years in IT/OT cybersecurity governance, risk management, compliance or consulting.
• Relevant qualification in Cyber/InfoSec, IT, CS, MIS, Science or Engineering.
• Strong technical skills in network defences, application, database and OS security; familiarity with cybersecurity assessment, cloud security, vulnerability assessment, penetration testing, incident management and IoT security desired.
• Professional certifications such as CISM, CRISC, CGEIT, and CISA are preferred; CISSP, GRID, GDAT, GDSA and GICSP are desired.
• Self-motivated with strong analytical skills and ability to influence stakeholders to achieve outcomes.
• Excellent written, presentation and communication skills to build strong relationships at all levels.

Responsibilities

• Strengthen cybersecurity governance for Critical Information Infrastructure (CII) across government and essential sectors.
• Directly engage regulators, CII owners and international partners to improve cyber risk management and security measures.
• Supervise and govern CIIs, with potential managerial responsibilities for a team of officers.
• Work with senior leaders in the cybersecurity space and coordinate with foreign government cybersecurity agencies and think-tanks.

Skills

Cybersecurity governance

Stakeholder engagement

Analytical thinking

Written and verbal communication

Education

Cyber/InfoSec related discipline degree

Tools

CISM

CRISC

CGEIT

CISA

CISSP

Job description

Critical Information Infrastructure (CII) Division works to strengthen the cybersecurity of our critical sectors in Government, Transport, Services and Utilities clusters. The team partners regulators and CII owners to strengthen the cyber resiliency of the Nation's CII against cyber threats and to ensure the continuity of the essential services.

Your work will be focused on enhancing the protection, detection, response and recovery capabilities of CII. You will be involved in directing, supervising and the administration of the cybersecurity governance and legislative framework, and engaging stakeholders on cyber risk management efforts and security measures. Experienced candidate will be exposed to engagement opportunities with foreign government cybersecurity agencies, international think-tanks and technical practice groups. As a senior member of the team, you will assist in the supervision and governance of the CIIs. If deemed suitable, you will undertake managerial responsibilities for a team of officers. There will also be opportunities for frequent interactions with senior leaders in the cybersecurity space.

Requirements

• Experience formulating and implementing cybersecurity policies and code of practice;
• Defence policy management experience or at least 12-15 years of Information Technology and/or Operational Technology in the area of cybersecurity governance, risk management, compliance and/or cyber consulting capacity;
• Relevant qualification in Political Science, Info-Communications Technology-related discipline (Cyber/Information Security, Information Technology, Computer Science, Management Information Systems), Science or Engineering;
• Strong technical skills in network defences, application, database and operating system security preferred cybersecurity assessment, cloud security, vulnerability assessment, penetration testing, incident management and IoT security are desired;
• Professional certifications such as CISM, CRISC, CGEIT, and CISA are preferred; CISSP, GRID, GDAT, GDSA and GICSP are desired;
• Self-motivated with strong analytical skills to deal with complex issues and influence internal and external stakeholders to achieve targeted outcomes;
• Possess excellent written, presentation and communication skills with the ability to build effective and strong working relationships at all levels.