Apply on Employer Site

Institute of Technical Education · 5 months ago

Cybersecurity Policy Developer

Mapletree Business City, Block 10, Level 9

Full-time

Onsite

Mid Level

3+ years exp

The Institute of Technical Education is seeking a Cybersecurity Policy Developer to join the Government Technology Agency (GovTech), which aims to enhance the delivery of digital services in Singapore. The role involves formulating cybersecurity policy standards and guidelines, collaborating with stakeholders, and addressing security challenges in the digital landscape.

Responsibilities

Lead or Support the formulation of progressive ICT Security policies to ensure continuous and relevant protection of Government ICT assets

Develop, assess and review existing and proposed policies in collaboration with stakeholders to govern cyber activities

Promote awareness of security issues and communicate security principles among management and stakeholders

Address policy queries, and assess exemption requests to ascertain relevance of preventive and detective controls to reduce risk of exposure

Work with the operational and implementation teams to identify, qualify, quantify and agree proposed mitigation plans against any identified risks and that those risks have been captured with mitigation plans

Conduct the measurement of security health posture of Agencies and provide analytical studies and trending of key risk indicators

Support limited scale security projects, system vulnerability assessments or audits of cyber programs if required

Find creative ways to take on and address complex information security challenges across a variety of existing and emerging technologies and digital environments

Qualification

CISSP certificationCISA certificationIT security managementPolicy complianceRisk assessmentCloud hosting designProject managementSoft skills

Required

Degree in Infocomm Security, Computer Science, Computer/Electronics Engineering or Information Technology

At least 3 years' of relevant IT or infocomm security consulting, project management, and/or IT audit and governance

Knowledge of IT security management principles and practices

Knowledge and experience of IM8/NIST/IS0 27001/2 policies /standards

Singapore Citizen only

Preferred

Possess CISSP and/or CISA certifications would be an advantage

Experience in one or more of the following areas will be an advantage; policy compliance and governance, risk assessment, solutioning, network design, application development, Internet of Things, cryptography, hardware design protection, mobile application/device management, cloud hosting design and implementation in AWS/Azure/Google, DevSecOps consulting, design and implementation of CI/CD pipelines, etc