Senior Cybersecurity Engineer (GeBIZ X)
Read straight from GovTech's careers page, verified 2d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationMOF Ministry of Finance, Singapore
Work modeon-site
Typecontract
SenioritySenior
DepartmentCybersecurity Engineer
Company size1,001–5,000 people
PostedJul 21, 2026 · 3mo ago
Verified live2d ago
May no longer be actively hiring
Posted by the company on Jul 21, 202649% of this company's open roles have been listed for 90+ days
At a glanceSummarised by Seekless from the posting.
Experience as a Senior Cybersecurity Engineer designing secure, resilient, and scalable digital platforms across cloud, SaaS, and enterprise environments
Lead the design, implementation, and continual improvement of cybersecurity controls across the GeBIZ X ecosystem
Define cybersecurity requirements and provide technical consultancy on application, cloud, and system security architecture
Lead security architecture reviews, threat modelling, security design reviews, and VAPT remediation planning for cloud-native, SaaS, COTS, and enterprise integrations
Drive cybersecurity risk assessments and recommend appropriate security controls
Apply Singapore Government ICT security policies and standards including IM8, GovTech Cybersecurity Playbooks for SaaS Security and LLM Applications, ISO/IEC 27001 and ISO/IEC 27018
Take ownership of end-to-end cybersecurity delivery for complex and ambiguously scoped initiatives
Lead development and maintenance of cybersecurity governance artefacts including SSPs, SCAs, SRAs, Risk Treatment Plans, and audit remediation reports
Lead and coordinate internal and external cybersecurity audits including GIROC and IM8 audits
Lead cybersecurity incident response and coordinate investigation, containment, recovery, root cause analysis, and implementation of preventive measures
Drive continuous improvement of cybersecurity controls, operational processes, and governance practices
Translate organisational cybersecurity objectives into actionable implementation plans
Identify cybersecurity risks, technology trends, and improvement opportunities and proactively recommend solutions
Evaluate emerging technologies including Frontier AI and AI-enabled capabilities, assessing associated cybersecurity risks and recommending appropriate security controls
Support strategic planning by providing cybersecurity insights, technical recommendations, and risk-based advice to IT and business stakeholders
Foster a culture of security, collaboration, continuous learning, and engineering excellence
Build trusted partnerships across GovTech, Government agencies, vendors, and multidisciplinary teams
Champion continuous improvement by challenging existing processes, sharing lessons learnt from projects and security incidents, and driving improvements to engineering and cybersecurity practices
Skills
Ivalua
SaaS
cloud
ISO/IEC 27001
ISO/IEC 27018
AI
Large Language Model (LLM)
About the company
Our multidisciplinary team comprises product managers, engineers, designers professionals passionate about delivering secure digital services for the Singapore Public Service.
About the role
You will work closely with CISOs, business owners, GovTech, technology partners and government agencies to build secure-by-design capabilities while shaping cybersecurity practices across the GeBIZ X ecosystem.
We are looking for an experienced Senior Cybersecurity Engineer who is passionate about designing secure, resilient, and scalable digital platforms across cloud, SaaS, and enterprise environments.
In this role, you will lead the design, implementation, and continual improvement of cybersecurity controls across the GeBIZ X ecosystem, encompassing the Ivalua SaaS platform, integrated Whole-of-Government (WOG) agency systems, and the Singapore Government Tech Stack (SGTS), connected through the MOF Orchestrator—the common integration platform.
Beyond engineering, you will play a pivotal role in cybersecurity governance, risk management, audit readiness, and security assurance. Working closely with GovTech, WOG agencies, business stakeholders, and technology partners, you will champion secure-by-design principles, strengthen cyber resilience, and ensure compliance with Singapore Government ICT security policies, standards, and regulatory requirements.
You will apply Singapore Government ICT security policies, standards, and industry best practices, including IM8, the GovTech Cybersecurity Playbooks for Software-as-a-Service (SaaS) Security and Large Language Model (LLM) Applications, as well as ISO/IEC 27001 and ISO/IEC 27018, to drive secure SaaS configuration, vendor risk management, protection of Personally Identifiable Information (PII) in cloud environments, and compliance with AI governance and security directives issued by the Smart Nation and Digital Government Office (SNDGO) and the AI Governance Division (AIDG).
Technical Leadership Expectations
•
Lead the design, implementation, and continual improvement of cybersecurity controls across the GeBIZ X ecosystem, ensuring secure-by-design principles are embedded throughout the solution lifecycle.
•
Define cybersecurity requirements and provide technical consultancy on application, cloud, and system security architecture, ensuring compliance with IM8 and prevailing Government ICT security policies and standards.
•
Lead security architecture reviews, threat modelling, security design reviews, and VAPT remediation planning for cloud-native, SaaS, COTS, and enterprise integrations.
•
Drive cybersecurity risk assessments and recommend appropriate security controls to address emerging threats and evolving business requirements.
•
Strengthen GeBIZ X’s cybersecurity posture by applying Singapore Government ICT security policies, standards, and industry best practices, including IM8, the GovTech Cybersecurity Playbooks for Software-as-a-Service (SaaS) Security and Large Language Model (LLM) Applications, as well as ISO/IEC 27001 and ISO/IEC 27018, to drive secure SaaS configuration, vendor risk management, protection of Personally Identifiable Information (PII) in cloud environments, and compliance with AI governance and security directives issued by the Smart Nation and Digital Government Office (SNDGO) and the AI Governance Division (AIDG).
Ownership
•
Take ownership of the end-to-end cybersecurity delivery for complex and ambiguously scoped initiatives, making sound technical decisions and driving workstreams through to successful implementation.
•
Lead the development and maintenance of cybersecurity governance artefacts, including System Security Plans (SSPs), System Criticality Assessments (SCAs), Security Risk Assessments (SRAs), Risk Treatment Plans, and audit remediation reports.
•
Lead and coordinate internal and external cybersecurity audits, including GIROC and IM8 audits, ensuring audit readiness, timely evidence submission, effective stakeholder engagement, and closure of audit findings.
•
Lead cybersecurity incident response and coordinate investigation, containment, recovery, root cause analysis, and implementation of preventive measures for security incidents.
•
Drive continuous improvement of cybersecurity controls, operational processes, and governance practices across the GeBIZ X ecosystem.
Strategic Alignment
•
Translate organisational cybersecurity objectives into actionable implementation plans, ensuring security initiatives support GeBIZ X product delivery and Whole-of-Government digital transformation goals.
•
Identify cybersecurity risks, technology trends, and improvement opportunities, proactively recommending solutions that enhance security resilience while balancing delivery, operational, and business needs.
•
Evaluate emerging technologies, including Frontier AI and AI-enabled capabilities, assessing associated cybersecurity risks and recommending appropriate security controls for secure adoption within Government systems.
•
Support strategic planning by providing cybersecurity insights, technical recommendations, and risk-based advice to IT and business stakeholders.
Culture and Organisation Influence
•
Foster a culture of security, collaboration, continuous learning, and engineering excellence by promoting knowledge sharing, innovation, and secure engineering practices.
•
Build trusted partnerships across GovTech, Government agencies, vendors, and multidisciplinary teams to deliver secure and resilient digital services.
Champion continuous improvement by challenging existing processes, sharing lessons learnt from projects and security incidents, and driving improvements to engineering and cybersecurity practices.
This is a 2-year contract role.