At least 4 years of experience in cybersecurity, preferably within a public sector environment.
Experience maintaining security policies, procedures, and guidelines.
Familiarity with Singapore Government security policies and standards.
Familiarity with risk assessment methodologies and experience conducting risk assessments.
Experience managing or supporting security audits and compliance reviews.
Relevant cybersecurity professional qualifications such as Certified Information Systems Security Professional (CISSP) or equivalent certification.
Strong stakeholder management and interpersonal skills.
Responsibilities
Conduct assessments throughout security-by-design phases, ensuring security requirements are defined, designed, and implemented throughout the system lifecycle in line with recognized security design principles and applicable ICT security policies, standards, and guidelines.
Participate in scoping and reviewing ICT security tests, reviews, and audits to ensure security assurance is achieved.
Analyze cybersecurity challenges and vulnerabilities associated with emerging technologies, including 5G, quantum computing, Internet of Things, and artificial intelligence; assess potential adoption risks; and develop and coordinate risk mitigation plans.
Assist in designing, developing, and supporting solutions for new security tools and technologies, test their effectiveness in real-world scenarios, and work with stakeholders to integrate innovative security solutions into existing systems and processes.
Assess and research security design, architecture, and standards; provide guidance; review and recommend enhancements to security architecture; and provide security considerations and controls for policy development.
Review technical annexes and areas of responsibility to ensure cybersecurity requirements and relevant policies are adhered to.
Support stakeholders in remediating security risks and understanding recommended risk-mitigating measures.
Advise stakeholders and ensure a secure lifecycle aligned with assessed security risks, security requirements, and prevailing ICT security policies, standards, and guidelines.
Ensure key security requirements are defined, designed, and implemented in accordance with security design and in compliance with ICT security policies, standards, and guidelines.
Review security architecture, designs, and implementations to ensure compliance with prevailing ICT security policies and standards.
Identify design gaps and recommend security enhancements.
Support the scoping of security tests, reviews, and audits, and review results to ensure security assurance is achieved.
Work with stakeholders to ensure timely submission of regular reports such as cybersecurity scorecards, and assist in driving cybersecurity awareness initiatives across the organisation.
Desired Qualifications
Cybersecurity experience within a public sector environment is preferred.
Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade. ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, governance and assurance services as well as managed processes. In a dynamic digital & cyber landscape where trust & collaboration is key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.
About the Role
We are looking for motivated and detail-oriented Cybersecurity Engineers to join our team. In this role, you will play a key part in strengthening the organisation's cybersecurity posture by providing consultancy, advisory, and assurance services across a broad range of cybersecurity domains.
Key Responsibilities
Conduct thorough assessments throughout security-by-design phases, ensuring security requirements are appropriately defined, designed, and implemented throughout the system lifecycle in line with recognised security design principles and applicable ICT security policies, standards, and guidelines.
Participate in the scoping and review of ICT security tests, reviews, and audits to ensure security assurance is achieved.
Analyse cybersecurity challenges and vulnerabilities associated with emerging technologies, including 5G, Quantum Computing, IoT, and AI, assess potential risks posed by their adoption, and develop and coordinate the execution of risk mitigation plans.
Assist in the design, development, and support of solutions for new security tools and technologies, test their effectiveness in real-world scenarios, and work closely with stakeholders to integrate innovative security solutions into existing systems and processes.
Assess, research, and provide guidance on security design, architecture, and standards, review and recommend enhancements to security architecture, and provide security considerations and controls for policy development.
Review technical annexes and areas of responsibility to ensure that cybersecurity requirements and relevant policies are adhered to.
Support stakeholders in providing guidance to remediate security risks and understanding recommended risk mitigating measures.
Advise stakeholders and ensure a secure lifecycle that is aligned with assessed security risks, security requirements, and prevailing ICT security policies, standards, and guidelines.
Ensure key security requirements are defined, designed, and implemented in accordance with security design and in compliance with ICT security policies, standards, and guidelines.
Review security architecture, designs, and implementations to ensure compliance with prevailing ICT security policies and standards.
Identify design gaps and recommend security enhancements.
Support the scoping of security tests, reviews, and audits, and review the results to ensure security assurance is achieved.
Work with stakeholders to ensure timely submission of regular reports such as cybersecurity scorecards, and assist in driving cybersecurity awareness initiatives across the organisation.
At least 4 years of experience in Cybersecurity, preferably within a public sector environment
Experience in maintaining security policies, procedures, and guidelines.
Familiarity with Singapore Government security policies and standards.
Familiarity with risk assessment methodologies and experience in conducting risk assessments.
Experience in managing or supporting security audits and compliance reviews.
Relevant cybersecurity professional qualifications such as Certified Information Systems Security Professional (CISSP) or equivalent certification.
Strong stakeholder management and interpersonal skills.
Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!
The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".
We thank you for your interest and please note that only shortlisted candidates will be notified.
By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/ or such other successor site.
A wholly-owned subsidiary of GovTech.
We promote a learning culture and encourage you to grow and learn.
Contract Staff enjoys the same benefits as Permanent Employees.