Senior IT Security Officer - A26334

ACTIVATE INTERACTIVE PTE LTD; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Activate Interactive Pte Ltd invites applications for a Product Manager within its Co-Development Business Unit, based in Singapore. The engagement is a fixed-term contract of 1 year, involving work with Singapore Government Agencies to deliver secure and reliable technology solutions across meteorological systems.

The role focuses on bridging cybersecurity with operational technology, requiring a background in cyber security and experience in critical infrastructure environments to protect

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Minimum 5 years of experience in IT/OT security roles, preferably within critical infrastructure, government, or scientific/technical environments.
• Proficiency with SIEM platforms, intrusion detection/prevention systems (IDS/IPS), and endpoint detection tools.
• Active or ability to obtain a government security clearance at the required level.

Responsibilities

• OT Asset Discovery & Architecture Mapping across meteorological networks with non-disruptive monitoring.
• Maintain the OT Asset Register for hardware, firmware, software and connections.
• Review IT/OT network architecture and produce topology diagrams with risk ratings.
• Map operational data flows between OT and IT to identify lateral attack paths.
• Maintain the Asset Register and Network Architecture Map for vulnerability assessments and incident response.
• Security Operations & Monitoring for meteorological systems and SIEM tools.
• Coordinate with CISO on patches and security incidents.
• Investigate and respond to security incidents with national CERT teams as required.
• Risk Management & Compliance with frameworks like NIST SP 800-82r3, FISMA, IEC 62443.
• Maintain COOP and disaster recovery procedures for weather services continuity.
• Vulnerability Management including scans, pen tests, and audits; patch cycles with engineers.
• Vendor & Supply Chain Security evaluating third-party components and enforcing security in contracts.
• Training & Security Awareness delivering cyber security training for operational context.

Job description

Activate Interactive Pte Ltd (\"Activate\") is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realise their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people's lives, then we would love to hear from you.

Co-Development Business Unit is looking for a Product Manager

This is a fixed term contract role. The engagement is 1 year.

You will work in Singapore Government Agencies

Internal Code: A26334

What will you do?

The IT Security Officer is responsible for protecting the integrity, availability, and confidentiality of key operational technology infrastructure within the Meteorological Service Singapore. This role bridges cybersecurity expertise with an understanding of specialized environmental monitoring technologies, ensuring that weather observation, forecasting, and dissemination systems remain secure, resilient, and compliant with national standards.

OT Asset Discovery & Architecture Mapping

Use passive, non-disruptive monitoring tools to discover OT assets across meteorological networks without impacting live operations.

Maintain a comprehensive OT Asset Register covering all hardware, firmware, software, and network connectivity. Flag all shadow or unmanaged devices.

Review and document the IT/OT network architecture, producing topology diagrams that capture OT-to-IT connectivity, remote access paths, vendor interfaces, and boundary crossing points, each risk-rated.

Map operational data flows between OT and IT systems to identify lateral attack paths, including where meteorological process data crosses into less-secure corporate network segments.

Maintain the OT Asset Register and IT/OT Network Architecture Map as the foundational security baseline for all vulnerability assessments, risk management, and incident response activities.

Security Operations & Monitoring

Monitor and defend operational technology (OT) supporting meteorological systems, including weather radar networks (e.g., Doppler Weather Radar S/C Bands), satellite ground stations, upper-air sounding systems, and automated weather observation systems (AWOS).

Operate and maintain security information and event management (SIEM) tools to detect anomalies across hybrid IT/OT environments.

Work closely with the Agency's CISO to manage and deploy critical patches and others security incidents.

Investigate and respond to security incidents, coordinating with national CERT teams and agency leadership as required.

Risk Management & Compliance

Conduct regular risk assessments across meteorological data acquisition, processing, and dissemination pipelines.

Ensure compliance with relevant frameworks such as NIST SP 800-82r3, FISMA, IC S/SCADA security standards (IEC 62443), and agency-specific cybersecurity policies.

Maintain and test the division's continuity of operations plans (COOP) and disaster recovery procedures to ensure minimal disruption to critical weather services.

Vulnerability Management

Perform and coordinate regular vulnerability scans, penetration tests, and security audits of systems.

Manage patch cycles in close coordination with systems engineers, balancing security needs against the 24/7/365 operational uptime requirements of weather services.

Vendor & Supply Chain Security

Evaluate third-party hardware and software used in meteorological systems (sensors, data feeds, vendor-supplied processing software) for supply chain risks.

Review and enforce security requirements in contracts with technology vendors and data partners.

Training & Security Awareness

Develop and deliver cybersecurity awareness training tailored to the division's operational context, including threats specific to environmental monitoring infrastructure.

Serve as the primary OT security expert for the division.

What are we looking for?

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Minimum 5 years of experience in IT/OT security roles, preferably within critical infrastructure, government, or scientific/technical environments.

Proficiency with SIEM platforms, intrusion detection/prevention systems (IDS/IPS), and endpoint detection tools.

Active or ability to obtain a government security clearance at the required level.

Familiarity wit