Cyber Digital Business Analyst - Crowdsourced Vulnerability Discovery Programme

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of GovTech, is hiring a Cyber Digital Business Analyst for its Crowdsourced Vulnerability Discovery Programme (CVDP). The CVDP includes the Government Bug Bounty Programme (GBBP), the Vulnerability Rewards Programme (VRP) and the Vulnerability Disclosure Programme (VDP). The analyst plans, executes and monitors these programmes, working with government agencies, security researchers and the bug bounty vendor.

Key responsibilities

• Plan, schedule and oversee the GBBP, VRP and VDP runs.
• Coordinate with government agencies on participation and scoping timelines, and follow up on required data and documentation.
• Manage the CVDP vendor relationship, including contract administration, performance monitoring, issue escalation, end-to-end preparation of each GBBP run and researcher onboarding (recruitment, vetting, test accounts).
• Support the triage team in preparing reports and resolve disputes with agencies.
• Support procurement and tendering, including drafting requirement specifications and evaluating vendor proposals.
• Prepare programme reporting, dashboards and management updates.
• Drive stakeholder communications and outreach, such as agency briefings.
• Identify and lead process improvements, using AI-assisted development (vibe coding) and GovTech platforms (Ownself Gather, Opus) to automate workflows and improve reporting.

Required profile

• At least 5 years of experience managing IT or technology programmes or projects; bug bounty or vulnerability disclosure programme experience is a strong plus.
• Strong project management skills to plan, execute and monitor operations.
• Good verbal and written English, able to explain technical findings to non-technical stakeholders.
• Experience managing vendors or contracts, tracking deliverables and service levels.
• Ability to work with data to track metrics and produce management reports.
• Ability to propose and implement process improvements.

Required skills

• Preferred: PMP, CITPM or equivalent certification.
• Preferred: familiarity with vulnerability management, penetration testing or bug bounty concepts.
• Preferred: experience in the public sector.

What we offer

• Remuneration commensurate with qualifications and experience.
• A learning culture with growth opportunities.
• Contract staff enjoy the same benefits as permanent employees.