Senior/OT Cyber Engineer (Cyber Capability & Engineering)

Maritime and Port Authority of Singapore (MPA); Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

Maritime and Port Authority of Singapore (MPA) is looking for an expert to develop and enhance cybersecurity capabilities in the Maritime sector. The role involves leading technical studies, implementing cybersecurity initiatives, and ensuring compliance with regulations.

The ideal candidate will have at least 3 years of experience in OT security and strong analytical and communication skills. A good command of English and certifications in cybersecurity (e.g., CISSP) are also essential.

Qualifications

• At least 3 years of experience with OT security.
• Experience in deploying and supporting security practices in OT environments.
• Knowledge of regulatory requirements and security standards.

Responsibilities

• Lead technical studies on OT cybersecurity scope.
• Develop and implement OT cybersecurity initiatives.
• Conduct cyber risk assessments and vulnerability assessments.
• Maintain compliance with cybersecurity requirements.
• Keep abreast of the latest industry practices and emerging threats.

Skills

OT security

Risk or vulnerability assessments

Intrusion detection systems

Analytical skills

Communication skills

Education

Certifications in cybersecurity (e.g., CISSP)

Job description

What the role is

Be accountable to build up the cybersecurity capability development for MPA and the Maritime sector and serve as the subject matter expert (SME) in cybersecurity, focusing on operational technology (OT).

What you will be working on

Key Duties and Responsibilities

• Lead technical studies on the existing and future OT cybersecurity scope, to build and deepen understanding of the cybersecurity services and technologies.
• Develop and lead the implementation of OT cybersecurity initiatives tailored for the Maritime sector.
• Work closely with relevant divisions within MPA to develop OT cybersecurity guidelines/templates, security requirements, network reference architecture, and establish OT cyber security training and awareness program, etc.
• Conduct cyber security architecture design review, cyber risk assessment, vulnerability assessment and penetration testing for OT systems, with focused emphasis on minimising disruption to critical information infrastructure and maintaining high operational availability.
• Work closely with stakeholders on security monitoring of OT systems and maintain compliance with the relevant cybersecurity requirements, guidelines and good practices.
• Lead and support project management efforts throughout the project life cycle, including, but not limited to, planning, execution, testing, validation and delivery to ensure timely and successful achievement of the desired OT cybersecurity outcomes.
• Keep abreast of the latest industry cybersecurity practices and technologies as well as emerging threats and vulnerabilities and provide insights to CTO and CISO and recommend appropriate controls and solutions for implementation to enhance Maritime sector cybersecurity posture.

What we are looking for

• At least 3 years of experience with OT security (such as OT Purdue model, OT network security, OT protection, OT Probes (e.g. Claroty, Nozomi)).
• Experience deploying or supporting security practices and technologies such as risk or vulnerability assessments, antivirus software, firewalls, intrusion detection systems, centralised alert logging and monitoring in OT environment (preferably in Maritime sector).
• Capable of leading projects involving multiple stakeholders.
• Certifications related to product management, cybersecurity (e.g., CISSP).
• Knowledge of regulatory requirements and security standards (e.g., NIST 800-82, ISO 27001, IEC 62443) relevant to IT and OT security.
• Good verbal and written communication skills with stakeholders at all levels.
• Strong analytical, interpersonal and communication skills.
• Work effectively in teams.
• Strong analytical, writing and communications skills.
• A good command of English.