Job Description

The Government Technology Agency (GovTech) aims to transform the delivery of Government digital services by taking an "outside-in" view, putting citizens and businesses at the heart of everything we d The Government Technology Agency (GovTech) aims to transform the delivery of Government digital services by taking an 'outside-in' view, putting citizens and businesses at the heart of everything we do. We also develop the Smart Nation infrastructure and applications, and facilitate collaboration with citizens and businesses to co-develop technologies. Join us as we support Singapore's vision of building a Smart Nation - a nation of possibilities empowered through info-communications technology and related engineering. The Cybersecurity Consultancy Service team in the Cyber Security Group (CSG) in GovTech provides in depth technical Point-of-View of advanced security technologies and emerging technologies to support better use of technologies in Government and the Smart Nation initiatives. What you will be working on: Lead in the development and implementation of cloud security architecture and technology to meet business functions while addressing cybersecurity threats and compliance requirements. Involve in the provision of cybersecurity consulting services for large, national or Whole-of-Government projects or systems. Support business initiatives through risk management, which involves performing security risk assessment to identify and analyse security risks, recommending risk treatment and mitigation measures, and assess residual risks. Ensure that key security requirements are defined and designed into the systems, implemented in accordance to the security design, and in compliance with prevailing ICT security policies and standards. Develop and review project specific security specifications and ensure alignment to assessed security risks, security requirements, prevailing ICT security policies and standards. Review security architectures, designs and implementations to ensure compliance with prevailing ICT security policies and standards. Identify design gaps and recommend security enhancements. Involve in designing artefacts (spanning design, development, and implementation) into enterprise systems that aligns to security principles and overall Enterprise System Architecture. Stay abreast of current and emerging cloud security technologies and the associated security threats. Align security architecture frameworks and standards with business strategies and functions. Partner with Ministry/Agency CISO, stakeholders, project teams, and outsourced vendors to ensure security objectives are achieved. What we are looking for: Degree in Infocomm Security, Computer Science, Electronics Engineering or equalavant with at least 8 years' of IT experience in security roles with in-depth hands-on knowledge of security practice. At least 6 years of cloud security architecture experience with a demonstrated ability as a trusted advisor in understanding business needs and security risks. At least 2 years of hands-on experience in one or more of the following security areas: network design, applications development, Internet of Things, wireless communications, cryptography, hardware design protection, mobile management, cloud hosting design and implementation, DevSecOps consulting, design and implementation of CI/CD pipelines, etc. Possess CISSP and/or CCSP, CISM, CISA certifications. Cloud related certifications are of added advantage Knowledge and experience in cloud design and architecture, and security practices/techniques to mitigate cloud security risks. Knowledge and experience of risk management methodologies and risk evaluation techniques. Able to work and communicate with all level from senior management level to working level. Singapore Citizen only. We are an equal opportunity employer and value diversity at our company as we believe that diversity is meaningful to innovation. Our employee benefits are based on a total rewards approach, offering a comprehensive and market-competitive suite of perks. This includes generous leave benefits to meet your work-life needs. We trust that you will get the job done wherever you are, and whatever works best for you - so work from home or take a break to exercise if you need to.. We also believe it's important for you to keep developing your skill in the constantly-evolving tech landscape, so we provide and support a plethora of in-house and external learning and development opportunities all year round. .Subject to the nature of your job role that might require you to be onsite during fixed hours.