Cybersecurity Workforce Development

The Government Technology Agency (GovTech) aims to transform the delivery of Government digital services by taking an "outside-in" view, putting citizens and businesses at the heart of everything we do. We also develop the Smart Nation infrastructure and applications and facilitate collaboration with citizens and business to co-develop technologies.

Join us as we support Singapore’s vision of building a Smart Nation - a nation of possibilities empowered through info-communications technology and related engineering. 

The Cybersecurity Group (CSG) is the cybersecurity arm of GovTech that is committed to creating a trusted digital Government for Singapore. You will be joining the Plans, Policy & Strategy (PPSD) team which oversees cybersecurity strategies, policy and resource-planning.  

JOB SCOPE: -

Cybersecurity Capability Development & Programme Management

• Develop, implement and continuously improve cybersecurity programmes and initiatives to strengthen cybersecurity awareness, behaviours and capabilities across Whole-of-Government.
• Design and manage cybersecurity training systems, learning pathways, workshops and capability development programmes for different cybersecurity and ICT practitioner communities.
• Develop programme roadmaps, implementation plans and performance metrics to evaluate the effectiveness of cybersecurity capability-building efforts.
• Conduct research and assessment of emerging cybersecurity education, awareness and training approaches, and recommend innovative ways to enhance workforce capabilities.
• Monitor programme outcomes and identify opportunities to improve participation, effectiveness and impact.

Simulated Phishing and Cyber Resilience Programmes

• Plan, coordinate and execute simulated phishing campaigns and other cybersecurity behavioural change initiatives across government agencies.
• Analyse phishing campaign outcomes and behavioural trends to identify areas of improvement and strengthen cyber resilience.
• Develop reports, dashboards and recommendations to support senior management decision-making and programme improvements.
• Work closely with agencies and stakeholders to support the implementation of remediation actions arising from programme findings.

Vulnerability Discovery and Bug Bounty Programmes

• Support the planning, execution and continual enhancement of government vulnerability discovery initiatives, including bug bounty programmes and other crowdsourced security testing activities.
• Engage agencies, security researchers and industry partners to drive programme participation and successful outcomes.
• Analyse vulnerabilities and programme findings to identify recurring security weaknesses and recommend improvements to cybersecurity practices and controls.
• Develop programme performance metrics and reporting for senior leadership and stakeholders.

Community Engagement & Cyber Hygiene Campaigns

• Plan and organise cybersecurity community engagement events, industry engagements, conferences, workshops, roadshows and learning sessions.
• Develop and execute cyber hygiene campaigns to promote good cybersecurity practices and strengthen awareness across government agencies.
• Build and maintain partnerships with government agencies, industry stakeholders, academia and the cybersecurity community to support the cybersecurity ecosystem.
• Support the development of communication materials, briefing papers, presentations, publicity materials and outreach initiatives.

REQUIREMENTS: -

• Bachelor’s or Master’s degree in Infocomm Security, Computer Science, Computer/Electronics Engineering or Information Technology preferred.
• CISSP and/or CISA certifications would be an advantage.
• Experience in designing, managing or delivering cybersecurity programmes, training initiatives, exercises, awareness campaigns or large-scale events would be an advantage.
• At least 5-6 years of relevant public service working experience in cybersecurity operations, programme management, capability development, training, stakeholder engagement, awareness campaigns or related fields.
• Command of the English language is a must.
• Excellent written, verbal communication and presentation skills.
• Strong analytical and problem-solving skills, with the ability to translate programme outcomes and data into actionable recommendations.
• Ability to engage and collaborate effectively with a diverse range of stakeholders including senior management, agencies, industry partners and cybersecurity practitioners.
• Strong organisational skills with the ability to manage multiple projects and priorities concurrently.
• Able to work independently and as part of a cross-functional team.
• Singapore Citizen only.