Information Security Officer

Position Overview

The Information Security Officer is tasked with safeguarding the integrity, availability, and confidentiality of crucial operational technology (OT) systems within the Meteorological Service of Singapore. This role combines cybersecurity expertise with a specialized knowledge of environmental monitoring technologies to ensure secure, resilient, and compliant weather observation, forecasting, and dissemination platforms.

Core Responsibilities

• Utilize passive and non-intrusive monitoring tools to detect OT assets throughout meteorological network environments without impacting live operations.
• Maintain a detailed register of OT assets encompassing all hardware, firmware, software, and network connections, including identifying any unauthorized or unmanaged devices.
• Analyze and document IT/OT network architecture by creating topology diagrams that illustrate OT-to-IT connectivity, remote access routes, vendor connections, and boundary crossing points, each assigned with risk ratings.
• Map and assess operational data flows between OT and IT systems to identify possible lateral attack vectors, specifically noting where sensitive meteorological data traverses less secure corporate networks.
• Continuously update and preserve the OT Asset Register and IT/OT Architecture Maps as the fundamental baseline for vulnerability assessments, risk management, and incident response processes.
• Design and present cybersecurity awareness programs tailored to the operational environment of the meteorological division, addressing threats relevant to environmental monitoring systems.
• Serve as the primary OT cybersecurity expert and point of contact within the division.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a closely related discipline.
• At least five years of experience in IT/OT security roles, ideally in critical infrastructure sectors, governmental bodies, or scientific and technical organizations.
• Demonstrated proficiency with Security Information and Event Management (SIEM) systems, intrusion detection/prevention solutions (IDS/IPS), and endpoint detection tools.
• Ability to obtain or currently hold an appropriate government security clearance corresponding to the position’s requirements.