[What the role is]
The Deputy Director of Cybersecurity Analysis and Operations Department leads the strategic and operational direction of MPA’s Maritime Cyber Assurance and Operations Centre (MCAOC), ensuring 24/7 protection of MPA digital systems. This executive role drives cyber defense for port operations, vessels, onshore IT/OT systems, and national maritime resilience, collaborating with industry, government agencies, and international partners to counter evolving threats.
[What you will be working on]
The key duties and responsibilities are to:
- Provide executive leadership for 24/7 MCAOC operations, including real-time threat monitoring, anomaly detection, incident response, and recovery for maritime IT/OT environments.
- Develop and execute security operations centre (SOC) strategy, integrating cyber threat intelligence, red teaming, threat hunting, and AI-driven analytics to safeguard port operations, vessels, and offshore assets.
- Establish and maintain cyber incident response frameworks, playbooks, and sectoral-level exercises (e.g., TTX simulations) for maritime critical information infrastructure (CII) protection.
- Oversee convergence of IT/OT cybersecurity requirements with Integrated Operations Centre, enterprise architecture, and CII owners for holistic risk management.
- Drive automation, SOAR, SIEM/EDR enhancements, and data linkages for early warning of cyber threats impacting navigational safety and business continuity.
- Lead investigations, vulnerability assessments, and remediation for MPA digital systems and CII partners, ensuring compliance with Singapore cybersecurity regulations and standards.
- Deliver executive dashboards and reports on SOC metrics (MTTD/MTTR), threat trends, and resilience posture to MPA CISO, leadership and national stakeholders.
- Foster partnerships with industry, research community, and international ports for information sharing and operational enhancements.
- Build and mentor a high-performing SOC team, emphasizing maritime-specific skills in OT/ICS security and Maritime Shipboard Operational Technology (MariOT) testbed training initiatives.
[What we are looking for]
- Background in Cybersecurity, Computer Science, or related field.
- 12–15+ years in cybersecurity, with 7+ years leading SOC operations.
- Deep expertise in IT/OT convergence, CII protection, red teaming, and incident management.
- Proficiency in SIEM, EDR, NDR, SOAR, threat intelligence platforms, and cyber tools.
- Strong executive communication for board-level reporting and crisis leadership.
- Experience in Singapore government/critical infrastructure cybersecurity.
Preferred Qualifications
- Certifications: CISSP, CISM, GIAC (GCIH/GCIA), or equivalent.
Key Success Indicators
- Enhanced MTTD/MTTR and zero major incidents impacting port operations.
- High team maturity, retention, and contributions to sectoral and national cyber exercises
Successful candidates will be offered a 2-year contract in the first instance and may be considered for an extension or placement on a permanent appointment.
