Cybersecurity Specialist

About the role

You will protect Changi Airport’s systems, applications and infrastructure from cyber threats. The role combines vulnerability management, security controls implementation, and incident response to safeguard critical digital assets.

Key responsibilities

• Assess cybersecurity aspects of design proposals for systems, applications and infrastructure.
• Source, manage and oversee external providers for annual vulnerability assessments and penetration testing.
• Recommend and apply security controls based on standards such as OWASP Top 10, NIST and CIS.
• Develop and maintain security policies, procedures and configurations aligned with ISO 27001.
• Participate in internal audits and reviews of the ISMS.
• Integrate secure development practices throughout the SDLC and work with developers to remediate vulnerabilities.
• Lead incident response activities, including log review, threat isolation, root‑cause analysis and recovery coordination.
• Stay current with emerging threats, vulnerabilities and mitigation techniques through training and industry events.
• Collaborate with security professionals and governance teams to raise security awareness.

Required profile

• Degree in Information Systems, Computer Engineering, Computer Science, ICT or a related field.
• Professional certifications such as CISSP, CISA, CISM or CompTIA Security+ are preferred.
• Solid knowledge of cybersecurity principles and best practices.
• Minimum of 5 years of relevant experience managing contractors and designing cybersecurity solutions.

Required skills

• Vulnerability assessment
• Penetration testing
• OWASP Top 10
• NIST framework
• CIS Controls
• ISO 27001
• Secure Software Development Lifecycle (SDLC)
• Incident response
• Log analysis
• Security controls implementation