Senior Manager / Executive Manager (Holistic Assessment), Risk Assurance Division

Job description

[What the role is] You will be part of the Risk Assurance Division within IMDA’s Resilience and Cybersecurity Group. The Holistic Assessment team in this Division assesses the overall cybersecurity risk posture of critical digital networks and systems and the cyber capabilities of organisations operating these networks. This includes integrating diverse sources of information, across the organisation’s external environment, its internal capabilities and the performance of its networks and systems. The team adopts an evidence-based approach to develop an objective assessment of the organisation and network’s key strengths and vulnerabilities. It also recommends key areas that senior management should track to uplift its cybersecurity risk posture. The Holistic Assessment team works with teams across IMDA’s Resilience and Cybersecurity Group, and in partnership with industry stakeholders. It regularly engages senior management in both IMDA and the industry, to review its findings and recommendations. Through these, the Holistic Assessment team plays a critical role in ensuring that the critical digital networks and systems which underpin Singapore’s Digital Economy remain secure and resilient. [What you will be working on] Conduct research and sense making of the evolving cybersecurity landscape in relation to Singapore’s digital infrastructure. This includes integrating threat intelligence information as well as international industry best practices for defending against current and emerging cyber threats. Review and assess findings on the performance of digital networks and systems, such as cyber audit reports and remediation, technical validations, results from penetration testing and threat hunting, national or sector-wide cybersecurity exercises. Conduct holistic assessment of the cybersecurity risk posture of the digital networks and systems, as well as the cyber capabilities of related organisations. This will be based on the findings obtained about the networks, assessed within the context of the external cybersecurity landscape. Engage senior management on the holistic assessment, including the implications of the key findings and recommended priority areas to focus on, for uplifting cybersecurity of the networks and systems involved. [What we are looking for] Background in Information Security, Engineering, Computer Science or equivalent with 8 years of experience in relevant fields or capacity. Good understanding of the digital landscape and appreciation of how the different facets of cyber threats and defence impact the effectiveness of digital networks and services within this broad context. Possess strong research and analytical skills. This includes identifying weak signals and connecting the dots on related issues across diverse sources of information. Excellent writing and communication skills. This includes translating technical findings to their strategic and business impact. You will be required to prepare and deliver your analysis and assessments in a clear and concise manner, tailored for different audiences. These can range from technical teams to senior management, from public officers to industry players. Enjoy working in a fast-paced and dynamic environment. Able to work independently as well as in a team/cross-team setting. Experience in information security and relevant GIAC certification will be an advantage. The position offered will be commensurate with experience. Only shortlisted candidates will be notified.