Deputy Chief Information Security Officer

**Responsibilities**:
DSO National Laboratories (DSO) is Singapore’s largest defence research and development (R&D) organisation, with the critical mission to develop technological solutions to sharpen the cutting edge of Singapore's national security. At DSO, you will develop more than just a career. This is where you will make a real impact and shape the future of defence across the spectrum of air, land, sea, space and cyberspace.

The Digital Division leads the digital transformation of DSO through the master planning and policies, delivering digital capabilities through IT infrastructure, and providing one stop service to corporate and R&D Divisions. The Digital Division will transform the way we work, our workplace, and the capabilities we deliver to the MINDEF/SAF and for the security of Singapore.

People are DSO’s greatest asset. You will get to realise your career aspirations and develop your own niche either as a deep technical expert or a leader in the team. With frequent career dialogues and a robust training and development framework, we will provide you with the necessary development tools for you to reach your potential. You will also be recognised and rewarded through competitive remuneration packages and scholarship opportunities.

Deputy Chief Information Security Officer

In this role, you will:

- Play an instrumental role in strengthening DSO's security posture, ensuring robust cybersecurity controls through:

- Assisting the Chief Information Security Officer (CISO) in development cybersecurity strategies that support present and future DSO work, workplace and workforce. This includes the responsibility to develop and operate DSO's information risk management programme across the Protect-Detect-Respond-Recovery spectrum, and to develop security policies and guidelines.
- Leading the SOC team (CSOG - Cybersecurity Security Ops Group) by providing clear guidance and directions for cyber-defence operations to defend DSO systems from advanced threats.
- Strategizing and planning enhancement of CSOG capabilities, and guide the team towards successful implementation and operationalisation of these capabilities.
- Developing, broadening and sharpening the team's knowledge and skill set, to keep up with the evolving cyber landscape.
- Working closely with stakeholders to ensure best practices and processes are aligned.
- Planning and cross deploying CSOG staff to deepen cyber security competencies.
- Concurrent Appointment in Information Division as Programme Director (Cyber Defence Operations) to collaborate in Cyber Defence projects, for example, in areas such as Malware Analysis and Threat Hunting. This role is expected to

(a) Co-lead selected Cyber Defence projects in Information Division, to identify and steer projects' direction with benefit of ground operational experience

(b) Leverage in-house developed Cyber Security tools and techniques to experiment, pilot and deploy in DSO networks, to provide an additional edge,

(c) Deeply appreciate cutting edge areas in Cyber Security to identify technical areas of expertise to develop in, and plan for CSOG's manpower to participate in selected Information Division projects.

**Requirements**:

- Degree in Computer Engineering/ Computer Science/ Information Security
- Minimum 12 years of experience working in areas of cybersecurity or in a SOC
- Demonstrated strong technical and domain knowledge in Enterprise System and IT infrastructure, with experience in cybersecurity threat monitoring, threat hunting, log review and analysis, network security, vulnerability assessment, penetration testing, compliance and cybersecurity risk management and controls
- Demonstrated strong knowledge in security controls requirements, technology processes, security policies, risk mitigation and cybersecurity best practises.
- Proven strong leadership in managing and developing a team. This includes giving clear directions on incident response activities and coordinating communications within the team.
- Proven record of working and collaborating with different stakeholders.
- Good communication and interpersonal skills with the team, management, and internal/external stakeholders
- Exhibit resilience and a positive attitude in tackling complex and large-scale security incidents
- Proactive and self-driven to continually improve the status quo
- Passionate in development the team's knowledge and abilities
- Excellent written and presentation skills
- Resourceful, strong work ethics and ability to work independently in a fast-paced environment