Senior Cybersecurity Operations Specialist

About GovTech and Role Overview

GovTech Singapore leads the nation’s Smart Nation projects and public sector digital modernization, specializing in data science, AI, app development, smart city innovations, digital infrastructure, and cybersecurity. As part of the Cyber Security Group (CSG), which strengthens government cybersecurity capabilities and governance, this role supports the Ministry Chief Information Security Officer (MCISO) Office in enhancing cyber resilience and response readiness across multiple agencies within a Ministry Family.

Key Duties and Responsibilities

• Develop and sustain Ministry-wide standardized incident response playbooks covering various threat types like ransomware, data breaches, and cloud compromises.
• Offer direct leadership and technical support to agencies during severe cyber incidents, ensuring prompt actions and effective threat mitigation.
• Collaborate with CIOs and CISOs to establish well-defined incident command structures that empower decisive crisis management.
• Design and manage rigorous tabletop exercises and chaos testing to evaluate and improve the Ministry’s cyber resilience continually.
• Drive adoption of chaos testing to uncover weaknesses and validate recovery strategies across critical systems.
• Assess operational cyber readiness regularly and spearhead initiatives to address gaps in incident handling capabilities.
• Oversee centralized monitoring onboarding for Ministry systems, resolve onboarding challenges in collaboration with system owners.
• Maintain comprehensive IT asset inventories with agency CIOs to ensure visibility for protection and monitoring.
• Advise on specialized threat detection, particularly for unique environments like OT or ICS that require custom monitoring solutions.
• Establish and govern standard operating procedures for vulnerability management across on-premise, government cloud, and operational technology setups.
• Ensure adequate deployment and proper prioritization of vulnerability scanning tools and validate remediation effectiveness.
• Promote a culture of resilience by educating stakeholders on the importance of response planning and business continuity.
• Instill an "assumed breach" mentality amongst project owners and agency leadership for enhanced threat awareness and responsibility.

Required Qualifications and Experience

• 8 to 10 years of substantial experience in cybersecurity operations, including SOC management and incident response leadership.
• Proven expertise in managing crisis-level security incidents with technical oversight and decisive action.
• Deep understanding of hybrid IT environments, including on-premises, cloud, and operational technology security operations.

Technical Proficiencies

• Comprehensive knowledge of incident response techniques, digital forensics, and malware analysis.
• Expertise in threat intelligence, mapping use cases to frameworks such as MITRE ATT&CK.
• Advanced understanding of vulnerability assessment, CVE and CVSS systems, exploitation methods, and prioritization of remediation based on contextual risk.
• Experience with detection platforms including SIEM, SOAR, XDR, and EDR, and capability to evaluate evolving tool relevancy.
• Familiarity with cloud environments, especially Government Commercial Cloud (GCC) and native cloud monitoring and incident management.
• Certifications like GCIH, GCFA, CHFI, or CISSP are highly favorable.

Essential Soft Skills

• Ability to maintain composure and provide clear command during critical security emergencies.
• Diplomatic skills to translate technical needs into strategic priorities for senior agency leaders.
• Keen interest in emerging security technologies and the foresight to adapt strategies to emerging threat tactics.

Additional Conditions

• This position is exclusively available to Singaporean citizens.