Lead Cybersecurity Engineer – Singpass

About the role

The Lead Cybersecurity Engineer will shape and drive the assurance programme for Singpass, Singapore’s digital identity platform. You will work across engineering, product, policy and operations to embed security assurance into all digital services.

Key responsibilities

• Identify assurance gaps across the product portfolio and select appropriate assessment approaches.
• Define the strategic direction of the cybersecurity assurance programme, prioritising work based on threat landscape, product criticality and risk appetite.
• Collaborate with cross‑functional teams to embed rigorous security assurance throughout the development lifecycle.
• Measure and track the effectiveness of assurance activities, including coverage, severity trends, remediation rates and compliance posture.
• Lead penetration tests, conduct secure architecture reviews, facilitate threat‑modelling exercises and advise on governance, risk and compliance matters.
• Promote a culture of accountability and continuous improvement among stakeholders.

Required profile

• Proven ability to independently lead a credible assurance function in a complex, multi‑product environment.
• Strong communication and influencing skills to work with engineering, product, policy and operations teams.
• Experience driving security assurance impact across digital services.

Required skills

• Penetration testing
• Secure architecture review
• Threat modelling
• Governance, risk and compliance (GRC)
• Security assessment and remediation tracking