Senior Manager / Executive Manager (Holistic Assessment), Risk Assurance Division

About the role

The role sits within the Connectivity, Cybersecurity & Resilience Group (C2R) of IMDA, which strengthens the cybersecurity and resilience posture of the telecommunications and media sectors in Singapore. You will join the Risk Assurance Division, where the Holistic Assessment team assesses the overall cybersecurity risk posture of critical digital networks and systems and the cyber capabilities of organisations running them. The team integrates information from the external environment, internal capabilities and network performance, and recommends priority areas for senior management to improve cybersecurity.

Key responsibilities

• Conduct research and sense-making of the evolving cybersecurity landscape in relation to Singapore's digital infrastructure, integrating threat intelligence and international best practices.
• Review and assess findings on digital network performance, such as cyber audit reports, remediation, technical validations, penetration testing and threat hunting results, and national or sector-wide cybersecurity exercises.
• Carry out holistic assessments of the cybersecurity risk posture of digital networks and systems and the cyber capabilities of related organisations, based on the external cybersecurity landscape.
• Engage senior management on the assessment, explaining the implications of key findings and recommending priority areas to strengthen cybersecurity.

Required profile

• Background in Information Security, Engineering, Computer Science or equivalent, with 8 years of experience in relevant fields or capacity.
• Good understanding of the digital landscape and how cyber threats and defence affect digital networks and services.
• Strong research and analytical skills, able to identify weak signals and connect the dots across diverse sources.
• Excellent writing and communication skills, able to explain technical findings to technical teams, senior management, public officers and industry players.
• Ability to work independently and in teams, and to enjoy a fast-paced, dynamic environment.
• Experience in information security and a relevant GIAC certification is an advantage.