Ministry Chief Information Security Officer

To enhance infocomm security capabilities in GovTech and the whole-of-government, GovTech will be appointing Chief Security Information Officers (CISO) at the various ministries to oversee infocomm security management. The CISO is responsible for the planning, development and ensuring all implementation of information security strategies and related policies. He/She is also required to follow, implement and refine organisational security policies and best practices in line with regulatory requirements and whole-of-government directions. 

What to Expect:

Obtain executive support and provide leadership for the Ministry and its agencies within the information security sphere through development of appropriate cyber security strategies and action plans

Formulate information security goals and establish policies, standards and procedures in line with whole-of-government cyber security directions 

Develop the culture of appropriate cyber security risk assessment and risk acceptance across stake holders to end users and ICT professional

Ensure cyber security compliance to whole-of-government policies and standards

Review, endorse, and align information security and develop risk management and mitigation plans

Advise management on the appropriate cyber security solutions and technologies to be deployed

Align IT needs with the strategic cyber security direction of whole-of-government

Implement change management process to keep up with evolving cyber threat landscape

How to Succeed:

Degree in Computer Science, Information Systems, Engineering or equivalent

Strong interpersonal and stakeholder management skills

Ability to work with cross-functional, multi-disciplined team to formulate, institute and monitor security policies and procedures

At least 10 years of management experience related to information security and working knowledge of ICT operations, security policies and procedures

Good understanding of both IT and business processes and the relationship between them

Preferably ‘Certified Information Systems Security Professional’ (CISSP), or ‘Certified Information Systems Auditor’ (CISA) or ‘Certified Information Security Manager’ (CISM) certifications

Singaporeans only