Senior Manager, Critical Systems Governance, Tech

Senior Manager, Critical Systems Governance, Tech & Logistics Policy Div 2 days ago Be among the first 25 applicants What The Role Is Reporting to the Director, Cybersecurity and ICT Governance Directorate (CIGD), the jobholder leads and guides the team in the aspect of cybersecurity governance, risk management and compliance of MHA’s Critical Information Infrastructure (CIIs) & Significant Information Infrastructure (SIIs) (“Critical Systems”) to applicable legislations and policies such as Cybersecurity Act & Cybersecurity Code of Practice (CCoP) and relevant WOG & MHA policies pertaining to these critical systems. The responsibility will also include engagement with HTD stakeholders to understand the issues and concerns and reconcile these with national and central government authorities in shaping the policy development. What You Will Be Working On Supervises the team who will coordinate with HTDs and HTX to ensure timely reporting of all governance matters (e.g. CCoP, IM8 & MHA policies, NIDAS findings, Cyber Exercise findings) including periodic updates as well as ad hoc requests from various authorities. Supervises and ensures the conduct of annual cybersecurity risk assessment are performed timely and according to CSA’s guide or requirements. Performs independent and holistic risk assessment on issues, especially in cases of non-compliance or deviations. Oversees the team who will coordinate with HTDs and HTX to provide proactive updates on compliance and health status to MHA senior management. Supervises and oversees all matters in the Security & Emergency (S&E) Sector helmed by MHA under the Cybersecurity Act e.g. designation of CIIs, determination of CII boundary exercise, notification of material change , collate, update and submit CII information records to CSA, reclassification of CIIs from ICT to OT or vice versa. Leads and works with team members in deliberations on cybersecurity matters with HTDs and CSA e.g. SingHealth COI Recommendations, ICT guideline consultations. This is to influence the requirements arising from such deliberations so that the requirements are not too onerous for HTDs to fulfil. Leads and works with team members to participate and coordinate in CSA’s initiatives e.g. CSA organised national and sector level Cyber Exercises, CII Preparedness Committee meetings, OTCEP forum, workshops, Minister’s sector visit. Supervises the team in maintaining S&E Sector’s Cyber Defence Plan and Sectoral Threat Profile that provides a holistic picture of S&E Sector in terms of the core mission, cyber ecosystem, risks and challenges faced, development plans to boost cybersecurity capabilities, capabilities & processes that S&E Sector has in place. What We Are Looking For Tertiary qualification in computer science, computer engineering or equivalent, preferably with a major in cybersecurity. Professional certifications such as CISSP, CISM would be advantageous. Preferably at least 8 years of working experience, with at least 5 years in a cybersecurity role. Familiarity and experience with the CS Act, CCoP and public sector policies is preferred. Personal Characteristics & Behaviour Good leadership skills. Good interpersonal skills and negotiation skills. Able to work under pressure and tight deadlines. Good writing and communication skills. Good analytical and critical thinking skills. All new hires are appointed on a two-year contract in the first instance and will be assessed and considered for permanent tenure over time, based on performance. As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment. All applicants will be updated on the status of their applications within 4 weeks upon closing of the advertisement. #J-18808-Ljbffr