Cybersecurity Engineer (CISO Office)

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of the Government Technology Agency (GovTech), is looking for motivated and detail-oriented Cybersecurity Engineers to join its CISO office. You will strengthen the organisation's cybersecurity posture by providing consultancy, advisory and assurance services across a broad range of cybersecurity domains.

Key responsibilities

• Conduct security assessments during security-by-design phases so that security requirements are defined, designed and implemented in line with recognised security design principles and ICT security policies, standards and guidelines.
• Take part in scoping and reviewing ICT security tests, reviews and audits to ensure security assurance is achieved.
• Analyse cybersecurity challenges and vulnerabilities of emerging technologies such as 5G, quantum computing, IoT and AI, assess their risks and coordinate risk mitigation plans.
• Help design, develop and support new security tools and technologies, test them in real-world scenarios and help integrate them into existing systems.
• Provide guidance on security design, architecture and standards, recommend improvements to security architecture and advise on security controls for policy development.
• Support stakeholders in remediating security risks and in understanding recommended risk mitigating measures.
• Ensure security requirements are defined, designed and implemented in compliance with ICT security policies, standards and guidelines, and review security architecture, designs and implementations.
• Identify design gaps and recommend security enhancements.
• Support the submission of regular reports such as cybersecurity scorecards and help drive cybersecurity awareness initiatives.

Required profile

• At least 4 years of experience in cybersecurity, preferably in a public sector environment.
• Experience maintaining security policies, procedures and guidelines.
• Familiarity with Singapore Government security policies and standards.
• Experience managing or supporting security audits and compliance reviews.
• Relevant cybersecurity professional qualifications such as CISSP or equivalent.
• Strong stakeholder management and interpersonal skills.

What we offer

• Remuneration commensurate with qualifications and experience.
• A learning culture that encourages growth and learning.
• Benefits for contract staff the same as those for permanent employees.