OT/ICS Cybersecurity Specialist / Manager
Job Summary: Embedded within the Facilities Management and project delivery team, the OT/ICS Cybersecurity Specialist / Manager leads and supports cybersecurity engineering, governance, risk management, compliance, security assurance, incident response and cyber resilience for Operational Technology (OT), Industrial Control Systems (ICS), SCADA and building-services systems across the Client’s project sites at Changi Airport. The role works closely with internal stakeholders, consultants, system integrators, OEMs and contractors to identify and mitigate cyber risks, review system and network architectures, ensure project and regulatory compliance, and protect the availability, integrity and resilience of safety- and operations-critical infrastructure throughout design, testing, commissioning, handover and operations. Job Responsibilities: Lead OT/ICS cybersecurity engineering and assurance for airport operational systems, including SCADA, BMS, EPMS, HVAC, airfield, security and other network-connected infrastructure.
Review and validate OT cybersecurity architectures, network segmentation, secure communications and system interfaces in line with defence-in-depth principles.
Evaluate vendor designs, technical submissions and system configurations for compliance with project requirements, cybersecurity standards and regulatory obligations.
Apply IEC 62443 principles to cybersecurity risk assessments, system hardening, access control, asset management, remote access and lifecycle security.
Develop and maintain OT cybersecurity documentation, including risk registers, asset inventories, compliance checklists, firewall requirements and gap assessments.
Assess cybersecurity risks across OT infrastructure, including PLCs, RTUs, IEDs, HMIs, SCADA systems, servers, network devices and virtualization platforms.
Define and review secure configuration, vulnerability management, patching, monitoring, logging, backup and disaster recovery requirements for OT environments.
Support secure third-party remote access, cybersecurity incident response, resilience planning and recovery activities.
Lead cybersecurity design reviews, technical workshops, testing, commissioning and remediation activities with consultants, contractors, OEMs and system integrators.
Provide cybersecurity expertise throughout the project lifecycle, from design and procurement to handover and operations, and prepare technical reports on risk, compliance and project readiness.
Job Requirements: Degree/Diploma in Cybersecurity, Information Technology, Engineering or a related field.
Minimum 5 years of relevant experience, including OT/ICS, SCADA or industrial cybersecurity environments.
Strong knowledge of OT cybersecurity principles, IEC 62443, network security and risk management.
Familiarity with industrial control systems, SCADA, BMS, EPMS, HVAC and related operational technologies.
Experience in cybersecurity design reviews, vulnerability management, compliance assessments, testing and commissioning.
Strong analytical, problem-solving and stakeholder management skills.
Experience in airports, critical infrastructure or industrial environments is an advantage.
Relevant certifications (e.g. CISSP, CISM, GICSP, ISA/IEC 62443) are preferred.
Knowledge of Singapore cybersecurity regulations and security requirements is advantageous.
Able to work in live operational environments and obtain required airport security clearances.