IT Security Specialist (Risk Assessment)
LocationHDB HUB
SeniorityMid
Experience2+ yrs
Company size10,000+ people
PostedAug 19, 2026 · 1mo ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
Experience in Threat Modelling, using frameworks such as MITRE ATT&CK and/or STRIDE
At least 2 years of relevant ICT security experience
Hands-on exposure to cybersecurity risk management, control assessment, security testing, compliance, and security best practices
Demonstrated competencies in cloud security, including cloud architecture, and Cloud Platform (AWS, Azure) security controls
Knowledge of IT security principles, controls, and industry frameworks, such as IM8, COBIT, ISO/IEC 27001/27002, or equivalent
Good awareness of the current and emerging cybersecurity landscape, threats, and trends
One or more relevant cybersecurity certifications such as CISSP, CRISC, CISM, CISA, CCSP, OSCP, CEH, or equivalent
Foundational understanding of access control and identity management
Foundational understanding of network and telecommunications security
Foundational understanding of cloud security
Foundational understanding of cybersecurity and information security governance & risk management
Foundational understanding of secure software development
Foundational understanding of cryptography
Foundational understanding of security architecture and design
Foundational understanding of security operations and incident response
Foundational understanding of business continuity and disaster recovery planning
Foundational understanding of legal, regulatory, and compliance considerations
Foundational understanding of physical and environmental security
Good interpersonal and communication skills
Demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail
Conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks
Good command of written and oral English
Skills
AWS
Azure
[What the role is]
About the company
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations
[What you will be working on]
You will play a key role in strengthening HDB’s cybersecurity and risk posture by designing, operationalising, and governing the Threat & Risk Assessment framework across enterprise IT systems and programmes. This role provides the opportunity to work closely with system owners, project teams, and senior stakeholders to identify cybersecurity and data risks early, assess their impact, and drive effective risk mitigation strategies across the organisation.
What you will be working on:
•
Develop, maintain, and operationalise HDB’s Threat & Risk Assessment framework to systematically identify, assess, and mitigate ICT, cybersecurity, and data risks across IT systems and programmes.
•
Conduct end‑to‑end cybersecurity risk assessments, including threat identification, risk analysis, control determination, and effectiveness reviews.
•
Drive and support key cybersecurity functions, including:
•
Cyber Security Assurance Programme
•
Threat & Risk Assessment Framework
•
Cyber & Data Security Risk Management
•
Enterprise Risk Management (Cybersecurity)
•
Provide security advisory and consultancy to project teams, including:
•
Project‑specific cybersecurity requirements and specifications
•
Evaluation of cybersecurity proposals and vendor submissions
•
Cybersecurity architecture and design reviews
•
System Security Acceptance Testing (SSAT) and security assurance reviews
•
Partner stakeholders to embed security‑by‑design into system development, enhancement, and modernisation initiatives.
•
Manage and promote IT security awareness and outreach programmes to strengthen organisation‑wide security culture.
•
Monitor emerging cyber threats, vulnerabilities, and industry best practices, and recommend pragmatic controls to continuously improve the organisation’s security posture.
•
Lead and/or contribute to the adoption of new technologies and security best practices in infrastructure, cloud, and application security to address evolving risk landscapes.
[What we are looking for]
You will be a Great Fit if you have:
•
Experience in Threat Modelling, using frameworks such as MITRE ATT&CK and/or STRIDE.
•
At least 2 years of relevant ICT security experience.
•
Hands‑on exposure to cybersecurity risk management, control assessment, security testing, compliance, and security best practices.
•
Demonstrated competencies in cloud security, including cloud architecture, and Cloud Platform (AWS, Azure) security controls.
•
Knowledge of IT security principles, controls, and industry frameworks, such as IM8, COBIT, ISO/IEC 27001/27002, or equivalent.
•
Good awareness of the current and emerging cybersecurity landscape, threats, and trends.
•
One or more relevant cybersecurity certifications such as CISSP, CRISC, CISM, CISA, CCSP, OSCP, CEH, or equivalent.
•
Foundational understanding of:
•
Access control and identity management
•
Network and telecommunications security
•
Cloud security
•
Cybersecurity and information security governance & risk management
•
Secure software development
•
Cryptography
•
Security architecture and design
•
Security operations and incident response
•
Business continuity and disaster recovery planning
•
Legal, regulatory, and compliance considerations
•
Physical and environmental security
Good to Have:
•
Good interpersonal and communication skills.
•
Demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.
•
Conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.
•
Good command of written and oral English.
Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers
More roles at Singapore Public Service
[LTA-DPO] SENIOR DEVELOPER, FULL STACK (MOTORING DIGITAL TRANSFORMATION)[LTA-RAOM] SNR / EXEC / ENGINEER, ASSET MGMT (SYSTEMS & PLANNING)Adjunct Lecturer (HR Tech, Digitalisation & Analytics) - Sch of Business MgtSr/Asst/EngineerSenior Manager / Assistant Director, Strategic Business Partnering (HR)