Senior Manager (Cybersecurity Oversight)

Civil Aviation Authority of Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Civil Aviation Authority of Singapore invites senior cybersecurity professionals to join the Cybersecurity Division as a senior team member with potential managerial duties. You will oversee policy formulation, regulatory oversight, and incident response for aviation cybersecurity, guiding resilience across critical systems.

The role requires extensive experience, professional certification, and strong governance, risk management, and stakeholder collaboration skills.

Qualifications

• 10–15 years of direct cybersecurity work experience in policy formulation, incident response, and management.
• Active certification in Cybersecurity or Information Security (ISACA, (ISC)2) is advantageous.
• Strong knowledge of information security governance, risk management, controls, and compliance.
• Understanding of cybersecurity's link to business goals and objectives.
• Self-motivated, independent, and a good team player with a can-do attitude.
• Excellent verbal, written, communication, presentation and analytical skills.

Responsibilities

• Formulate and implement aviation cybersecurity policies and regulations to ensure resilience of CII owners.
• Develop and oversee programmes to ensure regulatory compliance by the aviation sector.
• Collaborate with stakeholders on resiliency initiatives.
• Plan and conduct cybersecurity exercises to improve operational readiness.
• Manage aviation sector responses to cybersecurity incidents and threats.
• Participate in international meetings with partners to develop standards and collaboration.
• Stay updated on industry practices and advise on controls and solutions.

Skills

Cybersecurity

Policy formulation

Incident response

Regulatory oversight

Governance & risk

Vulnerability assessment

Business alignment

Communication skills

Analytical skills

Team player

Education

Cybersecurity degree

Job description

What the role is:

Cybersecurity is a critical pillar of CAAS’ work. To ensure that the Singapore air hub remains safe and secure for air travel, every mission-critical system that supports air hub operations must be well-protected and resilient against rapidly evolving, and increasingly complex, cybersecurity threats.

What you will be working on:

We are looking for strong and dynamic candidates to be part of the cybersecurity oversight team, within the Cybersecurity Division. As a senior member of the team, you may will be expected to undertake managerial responsibilities for a team of officers. Together, you will carry out cybersecurity oversight of the aviation sector to ensure compliance with regulatory requirements under such as the Cybersecurity Act and associated Cybersecurity Codes of Practice and develop initiatives to further strengthen the cybersecurity regulatory framework for the aviation sector.

• Formulate and implement aviation cybersecurity policies and regulations to ensure the cybersecurity resilience of aviation Critical Information Infrastructure (CII) owners and other regulated entities
• Develop and implement cybersecurity oversight programmes to ensure compliance with cybersecurity regulatory requirements by the aviation sector
• Work closely with internal and external stakeholders on cybersecurity resiliency initiatives
• Plan and conduct cybersecurity exercises for the aviation sector to improve operational readiness against a rapidly evolving cybersecurity threat landscape
• Manage and coordinate aviation sector-responses to cybersecurity incidents and threats
• Participate in international meetings and engage key international partners in developing international standards and other collaboration initiatives in aviation cybersecurity; and
• Keep abreast of the latest industry cybersecurity practices and technologies, as well as emerging threats and vulnerabilities, and recommend appropriate controls and solutions for implementation to enhance aviation cybersecurity posture

What we are looking for:

• Trained in Cybersecurity, Information Security, Information Technology, Computer Science, Engineering (Computing / Telecommunication) or equivalent
• At least 10-15 years of direct and relevant full-time cybersecurity work experience in policy formulation, incident response, and management, regulatory oversight, and compliance
• Possess an active professional certification in Cybersecurity or Information Security from ISACA, (ISC)2 or equivalent will be an advantage
• Strong domain knowledge of information security governance and risk management, controls, vulnerability assessment/penetration testing, compliance, business continuity, investigations, system architecture and design, legal, and industry IT/OT and cyber security best-practices.
• Able to show understanding of the relationship between cybersecurity and the broader business goals and objectives
• Self-motivated and independent, a good team player with well-rounded skillset and can-do attitude
• Able to work with different stakeholders to bring them together to achieve targeted outcomes
• Excellent verbal, written, communication, presentation, and analytical skills

Note: Your appointment designation will commensurate with your relevant work experience. Successful candidates will be offered a 3-year contract in the first instance, and may be considered for placement on a permanent tenure or subsequent contract renewal.

About Civil Aviation Authority of Singapore:

The Civil Aviation Authority of Singapore's raison d'etre is to develop the air hub and aviation industry in Singapore, expanding Singapore's links to the rest of the world. We enable opportunities through aviation, making connections, opening doors and enabling choices in people's lives.