Senior Specialist, Cybersecurity

NTUC Health Co-operative Limited; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NTUC Health Co-operative Limited seeks a Senior Specialist, Cybersecurity to turning cybersecurity risks into practical recommendations and strengthen controls across systems, apps and data in Singapore.

You will work hands-on across risk management, governance, and vendor engagements, ensuring security is embedded in technology projects and operations. Collaboration with multiple tech teams and vendors is essential.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related discipline.
• 5+ years' experience in cybersecurity operations, risk management, governance or security engineering.
• Strong knowledge of enterprise security tech (NGFW/IDS/IPS, EDR/XDR, PAM, WAF, SIEM/SOAR, DLP, SASE/ZTNA).
• Experience assessing and managing cybersecurity risks and remediation activities.
• Vendor and project management skills with tech teams and external providers.
• Excellent communication to explain risks to technical and non-technical audiences.
• Knowledge of AI security risks, governance and emerging tech risks.
• Experience with governance, regulations and vendor due diligence.

Responsibilities

• Conduct cybersecurity risk assessments and recommend risk treatment plans.
• Review vulnerability assessments, penetration tests and secure code reviews; drive remediation.
• Manage cybersecurity vendors and enterprise security controls (PAM onboarding, WAF/CDN, firewall review, EDR, SASE).
• Collaborate with Infrastructure, End User Support and Applications teams to address security gaps.
• Support third-party risk assessments and vendor due diligence.
• Coordinate cybersecurity awareness programs, newsletters, training and phishing campaigns.
• Support management reporting, Cybersecurity Subcommittee meetings and external audits; assess emerging AI-related risks.

Skills

Cybersecurity operations

Technology risk management

Security governance

Stakeholder engagement

Vendor management

Security engineering

Communication skills

AI security awareness

Education

Bachelor’s degree in Computer Science / IT / Cybersecurity

Tools

NGFW/IDS/IPS

EDR/XDR

PAM

WAF

SIEM/SOAR

Vulnerability management

SASE/ZTNA

DLP & cloud controls

Job description

NTUC Health operates a growing digital environment supporting healthcare, eldercare, and community services across Singapore.

As a Senior Specialist, Cybersecurity, you will help protect our systems, applications, endpoints and data by turning cybersecurity risks into a practical recommendation, strengthening security controls, and working with technology teams and vendors to improve our overall security posture.

This is a hands-on role for someone who can operate across cybersecurity technology, cyber risk management, governance and stakeholder engagement. You will work closely with Infrastructure, End User Support, Application teams, vendors and management to identify risks, drive remediation and ensure security is built into the way we operate.

What Success Looks like

• Key cybersecurity risks are identified, prioritised, and driven to appropriate remediation.
• Security testing findings are effectively managed with application and technology teams.
• Key security controls and vendor services are operating effectively and delivering expected security outcomes.
• Cybersecurity risk, third-party risk and audit issues are clearly reported and actively managed.
• Security requirements are embedded into technology projects and operational processes.

What You Will Do

• Conduct cybersecurity risk assessments and recommend risk treatment plans.
• Review vulnerability assessments, penetration tests and secure code reviews and drive remediation.
• Manage cybersecurity vendors and support the implementation and operation of enterprise security controls, including PAM onboarding, WAF/CDN, firewall rules review, EDR and SASE.
• Work with Infrastructure, End User Support and Application teams to address security gaps.
• Support third-party risk assessments and vendor due diligence.
• Coordinate cybersecurity awareness programmes, including newsletters, training and phishing campaigns, to improve security awareness and behavior.
• Support management reporting, Cybersecurity Subcommittee meetings and internet/external audits.
  Assess emerging risks, including Al-related threats and governance requirements.

Qualification

Must-Haves

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 5+ years of relevant cybersecurity experience, with practical exposure to cybersecurity operations, technology risk management, security engineering or governance.
• Strong working knowledge of enterprise security technologies, such as NGFW/IDS/IPS, EDR/XDR, PAM, WAF, SIEM/SOAR, vulnerability management, SASE/ZTNA, DLP, and cloud computing controls.
• Experience assessing and managing cybersecurity risks, including vulnerability assessments, penetration testing findings and remediation activities.
• Strong vendor and project management skills, with the ability to work effectively with technology teams and external service providers.
• Strong communication and stakeholder management skills, with the ability to explain cybersecurity risks and recommendations clearly to both technical and non-technical stakeholders.
• Knowledge of AI security risks, AI governance and emerging technology risks.
• Experience with cybersecurity governance, regulatory requirements and vendor due diligence.

Nice-to-Haves

• Professional certifications such as CISSP, CISM, CISA or equivalent.
• Strong analytical, problem-solving, and stakeholder management skills.
• Detail-oriented, proactive and willing to learn in a rapidly evolving cybersecurity environment.