Deputy Director

Contract, Government
- Location: East
- 5 days work week

**Responsibilities**:
Threat Monitoring and Analysis
- Ensure smooth day-to-day running of the Integrated Cybersecurity Defence Centre, and further develop its capabilities in partnership with internal/external stakeholders
- Develop means for effective cybersecurity threat monitoring and detection at the sectoral and enterprise level
- Ensure that detected cybersecurity threats, risks and vulnerabilities are analysed and addressed promptly;
- Provide regular management updates, incident reports and recommendations as necessary;
- Assist in the coordination of responses and investigation efforts during cybersecurity incidents;
- Keep abreast of the latest industry cybersecurity practices and technologies, as well as emerging threats and vulnerabilities, and recommend appropriate controls and solutions for implementation to enhance the aviation sector’s cybersecurity posture.

Resilience Building and Response
- Review and develop ICT security policies and standards in line with government IM8; assess waivers from these polices and standards
- Conduct independent ICT security assessments and reviews of ICT security reports to assess the adequacy and ICT security maturity of systems, infrastructure, services and processes;
- Engage system owners and development team to address any cybersecurity vulnerabilities and gaps identified in their systems;
- Deploy new/emerging technical solutions to detect cybersecurity breaches and anomalies to enhance overall enterprise cybersecurity posture;
- Planning and conduct ICT security audits, reviews, and cybersecurity exercises;
- Develop and review Cybersecurity Incident Response Plan to ensure relevance to cybersecurity threat landscape
- Be part of the incident and response team to respond and investigate ICT-related security incidents.
- Strengthen cybersecurity readiness/resilience through phishing exercises, red-teaming, bug bounty programmes etc.
- Develop and implement a capability development plan for cybersecurity personnel

Operations Implementation and Support
- Advise and support system owners on implementation and compliance of cybersecurity requirements and initiatives
- Develop systems’ cybersecurity architecture and implement harmonised cybersecurity systems and services
- Drive the development and maintenance of the cybersecurity architecture, framework, policies, standards, processes and procedure and maintain the cybersecurity handbooks
- Review and provide technical advice on the cybersecurity design for new system projects
- Support system owners in the review of new system pre-commission audit and other cybersecurity audit obligations
- Oversee the implementation of security tools and procedures to identify, detect and protect against existing and emerging cybersecurity threats to systems

**Requirements**:

- Trained in computer science, information systems, cybersecurity or related field.
- Relevant cybersecurity certifications such as CISSP, CISM, CISA and SANS will be advantageous.
- At least 10 or more years of experience in IT and business/industry, with demonstrable leadership experience and responsibilities.
- Preferably 5 or more years of experience in a large organisation leading cross-functional teams.
- Demonstrated experience in cybersecurity policy/regulatory development, ICT and data governance, cybersecurity risk management and compliance, and/or cybersecurity consulting capacity
- Good analytical, planning, leadership and execution skills.
- Strong stakeholder management skills to deal with complex issues, influence internal and external stakeholders to achieve targeted outcomes.
- Strong verbal and written communication skills.