Security Consultant

What The Role Is

As a Security Consultant, you will drive and deliver a multi-year quantum-safe migration programme across MAS.

What The Role Is

As a Security Consultant, you will drive and deliver a multi-year quantum-safe migration programme across MAS. Working with cross-functional stakeholders, you will define scope, manage schedules and dependencies, track risks and issues, and report progress to leadership.

What You Will Be Working On

Cybersecurity Project Management

• Lead and manage cybersecurity projects across the organisation, including tool implementation, process improvements, and compliance initiatives
• Collaborate with business units to ensure successful delivery and adoption whilst managing multiple workstreams, timelines, and dependencies
• Track project milestones, risks, budgets, and provide strategic reporting to enhance organisational security posture

Vendor & Contract Management

• Manage cybersecurity vendors including awareness platforms, incident response partners, and security solution providers
• Oversee contract renewals, performance reviews, SLAs, and procurement processes whilst ensuring compliance with internal and regulatory requirements
• Conduct comprehensive vendor evaluations, manage security clearance requirements, and coordinate procurement processes

Governance, Programme and Agile Delivery

• Lead complex, multi-year technology delivery across MAS, aligned with business objectives and approved scope, budget, timelines and risk appetite.
• Act as programme secretariat and delivery lead for steering committees and workstreams, with clear terms of reference, decision rights, ownership, governance cadences and escalation paths.
• Maintain integrated delivery plans, Agile backlogs, decision records, financial and resource forecasts, action tracking and executive reporting.
• Apply fit-for-purpose Agile methods, tools, ceremonies and metrics to improve delivery flow, transparency, quality and continuous improvement while meeting MAS governance and assurance requirements.
• Facilitate architecture, risk, funding and delivery forums, presenting options, dependencies, impacts and recommendations to support timely decisions.
• Align business, technology, cybersecurity, procurement, legal, risk, audit and operations stakeholders around outcomes, user needs and acceptance criteria, removing barriers across teams.

Requirements, Service Design And Migration Planning

• Elicit, analyse, scope and manage business, technical, security and operational requirements, translating them into prioritised user stories, technical specifications and measurable acceptance criteria.
• Define the service vision, target operating model, delivery strategy and roadmap for quantum-safe capabilities using service-design and user-centred approaches where appropriate.
• Maintain an integrated dependency map covering business services, applications, infrastructure, data flows, cryptographic assets, certificates, keys, protocols, libraries, hardware, third parties and change windows.
• Maintain a risk-based quantum migration register considering data sensitivity and retention, “harvest now, decrypt later” and “trust now, forge later” exposure, business criticality, algorithm and key usage, vendor readiness and remediation complexity.
• Translate the cryptographic inventory into prioritised migration waves, release plans, resource forecasts, budgets and cutover schedules, tracking remediation from discovery through decommissioning.
• Plan for crypto-agility, interoperability, rollback, business continuity and approved coexistence or hybrid approaches, with accountable owners, evidence, exceptions and residual-risk acceptance.

Procurement, Vendor and Supply-Chain Management

• Obtain, assess and periodically refresh supplier PQC roadmaps, supported algorithms, implementation timelines, product dependencies, upgrade paths and end-of-support dates.
• Coordinate proofs of concept and interoperability, performance, resilience and security testing before production adoption.
• Identify concentration, lock-in and supply-chain risks, maintaining contingency options where vendor readiness may affect critical milestones.

Standards, Policy and Horizon Scanning

• Monitor authoritative quantum-safe guidance and standards, including relevant Singapore guidance, NIST PQC standards and transition guidance, and applicable IETF protocol specifications.
• Maintain a standards watchlist distinguishing final standards from drafts and recording applicability, maturity, implementation implications and required programme decisions.
• Translate regulatory, policy, standards and industry developments into architecture guardrails, information-security controls, procurem