Senior Manager / Executive Manager (Holistic Assessment), Risk Assurance Division

Government Technology Agency (GovTech); Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

Government Technology Agency (GovTech) in Singapore seeks a seasoned information security professional to join the Holistic Assessment team within IMDA’s Resilience and Cybersecurity Group. You will conduct evidence-based assessments of digital networks and cyber capabilities, integrating threat intel, audits, and testing results to prepare actionable findings for senior management.

The role requires strong research, analytical, and writing skills to translate complex cybersecurity concepts into

Qualifications

• Eight years of experience in information security, engineering or CS related areas.
• Ability to translate technical findings into strategic business impact.
• Experience engaging senior management and diverse stakeholders.

Responsibilities

• Conduct holistic cybersecurity risk assessments of digital networks and systems.
• Review findings from audits, validations, pen tests and threat hunting.
• Integrate threat intelligence and industry best practices into assessments.
• Prepare clear, concise, executive-ready reports for management.

Skills

Research and analytical skills

Writing and communication

Independent and cross-team work

Education

Bachelor's degree in Information Security or related field

Tools

GIAC certification

Job description

[What the role is]The role sits within the Connectivity, Cybersecurity & Resilience Group(C2R) Group. C2R strengthens the cybersecurity and resilience posture ofthe telecommunication and media sectors in Singapore.The Group keeps Singapore’s digital connectivity secure,trusted, and robust against an evolving and increasinglycomplex threat landscape.[What you will be working on]You will be part of the Risk Assurance Division within IMDA’s Resilience and Cybersecurity Group. The Holistic Assessment team in this Division assesses the overall cybersecurity risk posture of critical digital networks and systems and the cyber capabilities of organisations operating these networks.This includes integrating diverse sources of information, across the organisation’s external environment, its internal capabilities and the performance of its networks and systems. The team adopts an evidence-based approach to develop an objective assessment of the organisation and network’s key strengths and vulnerabilities. It also recommends key areas that senior management should track to uplift its cybersecurity risk posture.The Holistic Assessment team works with teams across IMDA’s Resilience and Cybersecurity Group, and in partnership with industry stakeholders. It regularly engages senior management in both IMDA and the industry, to review its findings and recommendations. Through these, the Holistic Assessment team plays a critical role in ensuring that the critical digital networks and systems which underpin Singapore’s Digital Economy remain secure and resilient.Conduct research and sense making of the evolving cybersecurity landscape in relation to Singapore’s digital infrastructure. This includes integrating threat intelligence information as well as international industry best practices for defending against current and emerging cyber threats.Review and assess findings on the performance of digital networks and systems, such as cyber audit reports and remediation, technical validations, results from penetration testing and threat hunting, national or sector-wide cybersecurity exercises.Conduct holistic assessment of the cybersecurity risk posture of the digital networks and systems, as well as the cyber capabilities of related organisations. This will be based on the findings obtained about the networks, assessed within the context of the external cybersecurity landscape.Engage senior management on the holistic assessment, including the implications of the key findings and recommended priority areas to focus on, for uplifting cybersecurity of the networks and systems involved.[What we are looking for]Background in Information Security, Engineering, Computer Science or equivalent with 8 years of experience in relevant fields or capacity.Good understanding of the digital landscape and appreciation of how the different facets of cyber threats and defence impact the effectiveness of digital networks and services within this broad context.Possess strong research and analytical skills. This includes identifying weak signals and connecting the dots on related issues across diverse sources of information.Excellent writing and communication skills. This includes translating technical findings to their strategic and business impact. You will be required to prepare and deliver your analysis and assessments in a clear and concise manner, tailored for different audiences. These can range from technical teams to senior management, from public officers to industry players.Enjoy working in a fast-paced and dynamic environment.Able to work independently as well as in a team/cross-team setting.Experience in information security and relevant GIAC certification will be an advantage.The position offered will be commensurate with experience.Only shortlisted candidates will be notified.