Lead, Cybersecurity Operations Specialist, Singpass

GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.

At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round.

Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!

Learn more about GovTech at tech.gov.sg.

About the division:

At Singpass, we aim to provide reliable digital identity for Singapore that streamlines transactions, enables businesses, and protects against fraud. This involves improving the online transaction experience with Singpass and Corppass while keeping it secure. It includes everything from building better frontend applications for residents and keeping an eye on fraudulent transactions to improving internal operations and working with our partners.

What you will be working on:

As a Lead Cybersecurity Operations Specialist, your job will be to:

Determine what security problems are worth solving in your domain and decide what approach best reduces risk and delivers resilience for our users and systems

Shape the strategic direction of our cybersecurity capabilities and prioritise initiatives based on threat landscape, resources, and organisational risk appetite

Work with people from engineering, product, policy, and product operations to embed security across the full lifecycle of our digital services

Measure and track the effectiveness of our security operations, from detection coverage to response times and risk reduction

Wear multiple hats to keep our systems and users safe. You may be leading an incident response or threat hunt, reviewing architecture decisions, guiding a junior analyst, or shaping a new detection capability

Build a culture of security ownership and collaboration with the people you work with

What we are looking for

We are looking for a Lead, Cybersecurity Operations Specialist, who can independently drive security strategy and operations that protect meaningful public services, and operate effectively in a complex, fast-moving threat environment.

In this role, you will:

Own and drive security impact in the digital identity space Take end-to-end ownership of key security domains, shaping direction in alignment with Singpass' broader strategy. Translate threat intelligence, operational findings, and policy requirements into clear security investments and deliver measurable improvements in our security posture.

Lead security capabilities from design to sustained operations Drive the full lifecycle of security capabilities — from identifying gaps and designing solutions to operationalising them at scale. Define detection strategies, response playbooks, and tooling roadmaps that keep pace with an evolving threat landscape.

Make high-quality, risk-informed decisions Define security metrics, evaluate trade-offs, and prioritise effectively using threat data, operational insights, and strategic context. Focus efforts on initiatives that drive the most meaningful risk reduction across a diverse and evolving attack surface.

Guide day-to-day and crisis cybersecurity operations Lead and mentor the team through day-to-day security operations as well as high-stakes incidents. Bring structure, calm, and technical depth to incident response, ensuring issues are contained, investigated, and resolved with rigour and speed.

Partner deeply with engineering and product teams Work closely with software engineers and product managers with sufficient technical depth to influence architecture decisions, embed security requirements early, and ensure that security is a first-class consideration in how we build and operate our systems.

Demonstrate strong ownership and bias for action Operate with a high degree of autonomy. Navigate ambiguity, identify gaps in our security coverage, and proactively drive initiatives forward without waiting for direction.

Influence and align stakeholders effectively Communicate risk and security strategy clearly to align cross-functional teams and influence stakeholders, including senior leadership. Translate technical findings into business impact and actionable decisions.

Requirements:

10+ years of experience in cybersecurity, with 3 years or more of experience as a full-time SOC analyst, threat hunter or related discipline

Hands-on software engineering experience, with the ability to read, review, and reason about code and system architecture in the context of security

Demonstrated experience leading security teams and driving strategic security initiatives end-to-end

Proven ability to lead incident response efforts for complex, high-stakes security events

Professional certifications such as GMON, GCTD, GCFA, GNFA, GCFR, GCTI, GCIA, OSCP or other relevant certifications

Operational experience building or maturing security operations capabilities, including EDR, NDR, SIEM, SOAR, threat intelligence, or detection engineering

Strong ability to influence stakeholders and collaborate across engineering, product, and policy teams, including at the senior leadership level

Track record of operating with high autonomy in fast-moving environments, including work that goes beyond defined scope

What we offer you:

GovTech is an equal opportunity employer committed to fostering an inclusive workplace that values diverse voices and perspectives, as we believe that diversity is the foundation to innovation.   

Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programs. 

We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you. 

Learn more about life inside GovTech at go.gov.sg/GovTechCareers. Stay connected with us on social media at go.gov.sg/ConnectWithGovTech