Senior Assistant Director (Protective DNS), Safer Cyberspace Division

The Safer Cyberspace Division in CSA focuses on building national cyber resilience of organisations in Singapore. The Division develops and manages national cybersecurity technology initiatives under the SG Cyber Safe programme, in order to enable a safer cyberspace. Examples of programmes which the Division has rolled out include the CSA Cyber Essentials and Cyber Trust mark, which are published as national cybersecurity standards in Singapore. The target segment of the Division are Entities of Special Cybersecurity Interest (ESCI) regulated under the Cybersecurity Act and non-Critical Information Infrastructure (CII) organisations in Singapore, and these can range from large or significant organisations to Small and Medium Enterprises (SMEs), which form 99% of Singapore’s economy.
We are seeking a candidate to lead national initiatives aimed at elevating the overall cybersecurity posture of Singapore’s SMEs and Non-Profit Organisations (NPOs). In this role, you will oversee end-to-end project management, direct budget and resource allocations, perform security architecture reviews, and lead a dedicated team to deliver impactful cybersecurity programs across the nation. Some key responsibilities include:

1. Program Leadership & Strategy

• Drive National Adoption: Lead and execute strategic initiatives to raise the cybersecurity readiness and hygiene of SMEs and NPOs across Singapore.
• Team Leadership: Direct and mentor a multidisciplinary team of project managers, technical specialists, and external implementation partners to meet national cybersecurity objectives.

2. Project & Financial Governance

• End-to-End Project Management: Establish project scope, milestones, deliverable schedules, and governance structures for multi-year cybersecurity capability programs.
• Budget & Resource Allocation: Oversee project financing, vendor procurement, budget forecasting, and resource deployment to maximize program ROI and operational efficiency.

3. Technical & Architecture Guidance

• Security Architecture Reviews: Conduct technical and architectural assessments for solutions and frameworks deployed to or adopted by SMEs and NPOs.
• Pragmatic Risk Mitigation: Ensure recommended security baselines align with recognized national/international frameworks (e.g., Cyber Essentials, Cyber Trust marks, NIST CSF) while remaining accessible and actionable for smaller organizations.

4. Stakeholder & Ecosystem Engagement

• Cross-Sector Collaboration: Partner closely with internal statutory divisions, government agencies, trade associations, chambers of commerce, and NPO umbrella bodies.
• Vendor & Partner Management: Oversee external technology vendors, solution providers, and auditors to ensure high-quality delivery and service level compliance.
• 8 to 12+ years in Cybersecurity, Technology Risk, or Enterprise IT, with at least 5 years in a leadership or senior project management role.
• Proven ability to manage multi-million-dollar cybersecurity or digital transformation projects, including budget management and vendor procurement.
• Solid understanding of cybersecurity controls, cloud security, endpoint defense, and security architecture principles suitable for mid-market and non-profit environments.
• Familiarity with government procurement guidelines, cybersecurity risk management frameworks, and local cybersecurity standards (e.g., Cyber Essentials, MAS TRM, or WOG/IM8).
• Exceptional executive stakeholder management skills, capable of explaining complex cybersecurity concepts to C-Suite, board members, and non-technical SME/NPO leaders.
• CISSP, CISM, CRISC, CISA certification.