Cybersecurity Specialist (Exposure Management)

About the role

The National Institute of Education (NIE) in Singapore invites applications for a Cybersecurity Specialist (Exposure Management) within its Division of Academic Computing & Information Services (ACIS). The role covers managing exposure assessment, supporting vulnerability disclosure and security testing, and driving remediation and process improvement.

Key responsibilities

• Manage exposure assessment across applications, operating systems, cloud platforms and enterprise environments.
• Support the Vulnerability Disclosure Programme, bug bounty activities and security testing initiatives.
• Conduct penetration testing, configuration reviews, compliance assessments and AI-assisted security testing.
• Monitor and analyse external attack surface, cloud and identity exposures to identify security risks.
• Prioritise and coordinate remediation based on risk and business impact, track progress, manage exceptions and validate fixes.
• Support incident investigations by identifying vulnerabilities and exposures behind security incidents.
• Support the implementation and operation of cybersecurity technologies, solutions, AI and security projects.
• Drive process improvement, automation and continuous enhancement of cybersecurity effectiveness.

Required profile

• University degree in Information Systems, Computer Science, Cybersecurity or a related discipline.
• Minimum 3 years of relevant experience in vulnerability management, exposure management, security testing or cybersecurity operations.
• Experience with vulnerability assessments, remediation tracking and security risk analysis across enterprise environments.
• Experience coordinating remediation with technical teams, system owners, vendors and other stakeholders.
• Familiarity with incident response, security investigations and cybersecurity operations is advantageous.

Required skills

• Knowledge of operating systems, web applications, cloud technologies, identity security and common threats.
• Familiarity with penetration testing, attack surface management, configuration assessment and security assessment methodologies.
• Understanding of vulnerability management processes, risk assessment and remediation lifecycle.
• Strong analytical, communication, stakeholder management and problem-solving skills.