Job Description

Senior/Executive, Cyber Security (IT Projects) - Contract








Job Purpose



Security, privacy and operational resilience are critical issues facing all organizations today. We are currently looking for qualified and capable security minded individuals to be the driving force behind SMRT\xe2\x80\x99s cyber security measures with the goal of enabling ongoing, secure and reliable operations across the enterprise.


Responsibilities



You will work closely with the Project Management Office (PMO) team to drive information systems engineering, architecture review, and security-by-design associated with cyber security. Specific responsibilities include but are not limited to:

• Be a Subject Matter Expert (SME) for cybersecurity systems engineering, architecture review, and design in Information Systems.
• Pre-project consultation sessions with Business Units (BUs)
• Work closely with the information system project manager and team to review and define cyber security requirements in the tender documents, aligned with the latest SMRT cybersecurity policies, and latest industry practices, and comply with regulatory requirements (e.g. PDPA)
• Review and evaluate cybersecurity proposals from vendors and provide recommendation
• After the award, to review the design and technical documents from vendors on implementation design and approach
• Review cybersecurity-related reports, e.g. Vulnerability Assessment and Penetration Test results and review remediations taken
• Provide Support during User-Acceptance-Test (UAT) stage
• Research, design, and advocate new technologies, architectures, and security products that will support security requirements for information systems development.
• Evaluate and develop secure solutions, based on approved security architectures and analyze business impact and exposure, based on emerging security threats, vulnerabilities, and risks.

Qualifications & Work Experience

• A degree in Engineering, Computer Science or equivalent.
• At least 2 years of experience in Cybersecurity with experience in cybersecurity information systems engineering, architecture review, and design.
• Posses a good understanding of the Security-By-Design for information systems development
• Possess a good understanding of cybersecurity principles, governance, and risk management
• Able to demonstrate a good understanding of IT infrastructure, secure application development, and security controls
• Strong understanding of MITRE ATT&CK frameworks will be advantageous
• Good understanding of threats, vulnerabilities, and exploits in IT environments and appropriate mitigation techniques will be advantageous
• Cybersecurity credentials such as CISSP, OSCP, GCIH and/or GICSP will be advantageous

Skills



Technical skills include:

• Audit and Compliance
• Business Continuity
• Cyber Incident Management
• Cyber Risk Management
• Security Administration
• Security Education and Awareness
• Stakeholder Management

Generic skills include:

• Good verbal and written communication skill.
• Organizational skill in providing end to end event planning
• Problem Solving
• Resource Management

SMRT Trains Ltd was incorporated in 1987 and operates Singapore\xe2\x80\x99s first mass rapid transit system. Today, we manage and operate train services on the North-South Line, East-West Line, the Circle Line, the Thomson-East Coast Line, and the Bukit Panjang Light Rail Transit. With over 5,000 employees, more than 250 trains, and 141 km of rail tracks across 108 stations, we serve millions of commuters daily.