Senior Principal Cybersecurity Engineer: OT & Power Sector

Energy Market Authority (EMA); Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Energy Market Authority (EMA) in Singapore leads regulatory oversight and cybersecurity assurance for the power sector’s Critical Information Infrastructure. The role focuses on assessing risks and coordinating remediation with CII owners, OT specialists, CSA and other agencies to strengthen cyber resilience.

You will review cybersecurity assessments, testing, and remediation plans, and participate in sector initiatives, regulatory implementations and incident preparedness.

Qualifications

• Strong understanding of cyber risk management, vulnerabilities and threats.
• Ability to analyse risks and collaborate with engineers for mitigations.
• Familiarity with vulnerability management, security testing or incident response is a plus.
• OT cybersecurity, CII protection and power-sector knowledge are advantageous.

Responsibilities

• Review cybersecurity risks, vulnerabilities, audit findings and remediation plans for power-sector CIIs.
• Assess cybersecurity measures implemented by CII owners, including OT environments.
• Conduct and support cybersecurity assurance activities and site visits.
• Review assessments and testing by CII owners and service providers; shape scope based on risks.
• Monitor significant findings and coordinate remediation with owners and stakeholders.
• Support regulatory requirements and national cybersecurity initiatives for the power sector.

Skills

Cybersecurity fundamentals

Risk assessment

Analytical & stakeholder management

Communication skills

Education

Cybersecurity or related field

Job description

Energy Market Authority (EMA) in Singapore leads regulatory oversight and cybersecurity assurance for the power sector’s Critical Information Infrastructure. The role focuses on assessing risks and coordinating remediation with CII owners, OT specialists, CSA and other agencies to strengthen cyber resilience.

You will review cybersecurity assessments, testing, and remediation plans, and participate in sector initiatives, regulatory implementations and incident preparedness.