Senior Cyber Assurance & AI Security Specialist

About the role

The Centre for IT Services (CITS) at NTU manages the university's campus-wide IT infrastructure and delivers enterprise IT, learning systems and digital services. Its Cyber Security team strengthens the university's cybersecurity posture through Cyber Security Governance, Cyber Security Operations and Cyber Incident Management. It is seeking an experienced Senior / Cyber Assurance & AI Security Specialist to join the Cyber Security Governance team, helping define and govern enterprise cybersecurity frameworks, lead technical cyber assurance initiatives and strengthen resilience against evolving cyber threats.

Key responsibilities

• Lead technical cyber assurance by defining and governing the scope, schedules, methodologies and standards for internal and external web, mobile, network and API security.
• Advise on security issues in code written by AI agents or AI-native applications, such as OWASP Top 10 for LLMs.
• Conduct security reviews and audits of enterprise security infrastructure, maintain security documentation and oversee access control administration.
• Design risk assessment frameworks and security guardrails for AI-assisted software development, and set testing methodologies to find vulnerabilities in AI-generated code.
• Review and approve secure system architectures so security principles are embedded in designs and implementations.
• Evaluate authentication solutions, network security configurations, security software updates and technical implementations.
• Plan, manage and deliver cybersecurity risk assurance projects within budget and timeline.
• Partner with schools and stakeholders to identify risks, advise on risk mitigation and promote cybersecurity governance across the university.

Required profile

• Bachelor's degree in Computer Science, Computer Engineering, Cyber Security or a related discipline.
• Professional certification in OSCP or CREST is required; CISSP, CISA, CISM or GIAC is an advantage.
• At least 8 years of relevant IT experience, including at least 2 years in Cyber Security Engineering, Cyber Assurance, Penetration Testing or IT Risk and Governance.
• Proven project management capability leading cybersecurity initiatives from planning to implementation.
• Excellent communication, stakeholder management and interpersonal skills.

Required skills

• Strong knowledge of security issues in AI-generated code (e.g. OWASP Top 10 for LLMs).
• Cybersecurity frameworks such as NIST Incident Handling Guidelines, Cyber Kill Chain and MITRE ATT&CK.
• Penetration testing, secure software development lifecycle (SSDLC) and security assessment of code repositories such as GitHub and GitLab.
• Ability to perform cyber risk assessments and analyse complex technical environments.