Technical skills

Cybersecurity

About this role

The Government Technology Agency (GovTech) aims to transform the delivery of Government digital services by taking an "outside-in" view, putting citizens and businesses at the heart of everything we do. We also develop the Smart Nation infrastructure and applications and facilitate collaboration with citizens and business to co-develop technologies.

Join us as we support Singapore’s vision of building a Smart Nation – a nation of possibilities empowered through info-communications technology and related engineering.

The Cybersecurity Group (CSG) is the cybersecurity arm of GovTech that is committed to creating a trusted digital Government for Singapore. You will be joining the Plans, Policy & Strategy (PPSD) team which oversees cybersecurity strategies, policy and resource-planning.

Job Scope

Cybersecurity Capability Development & Programme Management
Develop, implement and continuously improve cybersecurity programmes and initiatives to strengthen cybersecurity awareness, behaviours and capabilities across Whole-of-Government.
Design and manage cybersecurity training systems, learning pathways, workshops and capability development programmes for different cybersecurity and ICT practitioner communities.
Develop programme roadmaps, implementation plans and performance metrics to evaluate the effectiveness of cybersecurity capability-building efforts.
Conduct research and assessment of emerging cybersecurity education, awareness and training approaches, and recommend innovative ways to enhance workforce capabilities.
Monitor programme outcomes and identify opportunities to improve participation, effectiveness and impact.

Simulated Phishing and Cyber Resilience Programmes

Plan, coordinate and execute simulated phishing campaigns and other cybersecurity behavioural change initiatives across government agencies.
Analyse phishing campaign outcomes and behavioural trends to identify areas of improvement and strengthen cyber resilience.
Develop reports, dashboards and recommendations to support senior management decision-making and programme improvements.
Work closely with agencies and stakeholders to support the implementation of remediation actions arising from programme findings.

Vulnerability Discovery and Bug Bounty Programmes

Support the planning, execution and continual enhancement of government vulnerability discovery initiatives, including bug bounty programmes and other crowdsourced security testing activities.
Engage agencies, security researchers and industry partners to drive programme participation and successful outcomes.
Analyse vulnerabilities and programme findings to identify recurring security weaknesses and recommend improvements to cybersecurity practices and controls.
Develop programme performance metrics and reporting for senior leadership and stakeholders.

Community Engagement & Cyber Hygiene Campaigns

Plan and organise cybersecurity community engagement events, industry engagements, conferences, workshops, roadshows and learning sessions.
Develop and execute cyber hygiene campaigns to promote good cybersecurity practices and strengthen awareness across government agencies.
Build and maintain partnerships with government agencies, industry stakeholders, academia and the cybersecurity community to support the cybersecurity ecosystem.
Support the development of communication materials, briefing papers, presentations, publicity materials and outreach initiatives.

Requirements

-
Bachelor’s or Master’s degree in Infocomm Security, Computer Science, Computer/Electronics Engineering or Information Technology preferred.
CISSP and/or CISA certifications would be an advantage.
Experience in designing, managing or delivering cybersecurity programmes, training initiatives, exercises, awareness campaigns or large-scale events would be an advantage.
At least 5-6 years of relevant public service working experience in cybersecurity operations, programme management, capability development, training, stakeholder engagement, awareness campaigns or related fields.
Command of the English language is a must.
Excellent written, verbal communication and presentation skills.
Strong analytical and problem-solving skills, with the ability to translate programme outcomes and data into actionable recommendations.
Ability to engage and collaborate effectively with a diverse range of stakeholders including senior management, agencies, industry partners and cybersecurity practitioners.
Strong organisational skills with the ability to manage multiple projects and priorities concurrently.
Able to work independently and as part of a cross-functional team.
Singapore Citizen only.