Cyber Security Engineer – OT/ICS (Jurong Island)

About the role

The Cyber Security Engineer will support the operation and security of our OT/ICS environment on Jurong Island. You will ensure the availability, reliability, and resilience of critical industrial control systems while maintaining compliance with relevant security standards.

Key responsibilities

• Support OT/ICS operations, including networks, systems, endpoints, and security tools.
• Monitor OT systems and networks for availability, reliability, and suspicious activity.
• Configure, troubleshoot, and provide day‑to‑day operational support for cybersecurity solutions in the ICS environment.
• Maintain and enhance security controls for critical systems to meet operational and cybersecurity requirements.
• Manage backup processes for CII systems and networks to ensure business continuity.
• Administer the Information Security Management System (ISMS) and conduct annual policy reviews.
• Perform annual cybersecurity risk assessments, vulnerability management, and patch management for OT/ICS.
• Plan and execute security activities such as vulnerability assessments, penetration testing, threat hunting, purple‑team and tabletop exercises.
• Support internal and external audits, track findings, and ensure timely remediation.
• Review technology architecture, propose upgrades, and oversee cybersecurity assurance for new projects.

Required profile

• Experience in OT/ICS security operations and incident response.
• Familiarity with ISMS administration and compliance frameworks (CSA, PSO, EMA, CCOP, ISO 27001:2022).
• Ability to conduct risk assessments, vulnerability assessments, and penetration testing.
• Strong analytical skills to identify and mitigate security risks in industrial environments.

Required skills

• OT/ICS security operations
• Vulnerability Assessment (VA)
• Penetration Testing (VAPT)
• Threat Hunting
• Purple‑Team Exercises
• Tabletop Exercises
• Security Reviews and Assessments
• Audit coordination and remediation
• ISMS management
• Risk assessment and mitigation