Skip to content

Open nowPosted 29 days ago

IT Security Officer (Public Sector)

MyCareersFuture94,028 open roles

Pay
SGD 6,500 – SGD 9,500 a month
Where
Singapore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Security Officer (Public Sector)MyCareersFuture · Singapore
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on MyCareersFuture's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.7% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.6%1 day
  2. 3.3%3 days
  3. 7.7%7 days
  4. 14.0%14 days
  5. 33.7%30 days
This job: posted 29 days ago

The posting

  • 1-year contract, renewable
  • Hybrid work arrangement
  • Government project

Position Overview

The IT Security Officer is responsible for protecting the integrity, availability and confidentiality of key operational technology infrastructure within the Meteorological Service Singapore.

The role combines cybersecurity expertise with an understanding of specialised environmental monitoring technologies, ensuring that weather observation, forecasting and dissemination systems remain secure, resilient and compliant with national standards.

Key Responsibilities

OT Asset Discovery and Architecture Mapping

  • Use passive, non-disruptive monitoring tools to identify OT assets across meteorological networks without affecting live operations.
  • Maintain a comprehensive OT Asset Register covering all hardware, firmware, software and network connectivity.
  • Identify and flag all shadow or unmanaged devices.
  • Review and document the IT/OT network architecture.
  • Produce topology diagrams showing OT-to-IT connectivity, remote-access paths, vendor interfaces and boundary-crossing points, with each area appropriately risk-rated.
  • Map operational data flows between OT and IT systems to identify potential lateral attack paths, including points where meteorological process data enters less-secure corporate network segments.
  • Maintain the OT Asset Register and IT/OT Network Architecture Map as the foundational security baseline for vulnerability assessments, risk management and incident-response activities.

Security Operations and Monitoring

  • Monitor and protect OT supporting meteorological systems, including weather radar networks such as Doppler Weather Radar S/C Bands, satellite ground stations, upper-air sounding systems and automated weather observation systems.
  • Operate and maintain Security Information and Event Management (SIEM) tools to detect anomalies across hybrid IT/OT environments.
  • Work closely with the agency’s Chief Information Security Officer to manage and deploy critical patches and address other security incidents.
  • Investigate and respond to security incidents, coordinating with national CERT teams and agency leadership when required.

Risk Management and Compliance

  • Conduct regular risk assessments across meteorological data acquisition, processing and dissemination pipelines.
  • Ensure compliance with relevant frameworks and standards, including NIST SP 800-82r3, FISMA, IEC 62443 and agency-specific cybersecurity policies.
  • Maintain and test the division’s Continuity of Operations Plan and disaster-recovery procedures to minimise disruption to critical weather services.

Vulnerability Management

  • Perform and coordinate regular vulnerability scans, penetration tests and security audits of relevant systems.
  • Manage patching cycles in close coordination with systems engineers, balancing security requirements against the 24/7 operational uptime requirements of weather services.

Vendor and Supply Chain Security

  • Evaluate third-party hardware and software used in meteorological systems, including sensors, data feeds and vendor-supplied processing software, for supply-chain risks.
  • Review and enforce security requirements in contracts with technology vendors and data partners.

Training and Security Awareness

  • Develop and deliver cybersecurity awareness training tailored to the division’s operational environment, including threats specific to environmental monitoring infrastructure.
  • Serve as the division’s primary OT security expert.

Required Qualifications

  • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or a related field.
  • At least five years of experience in IT/OT security roles, preferably within critical infrastructure, government or scientific and technical environments.
  • Proficiency with SIEM platforms, intrusion detection and prevention systems, and endpoint detection tools.
  • Active government security clearance at the required level, or the ability to obtain one.

Preferred Qualifications

  • Familiarity with meteorological systems, remote-sensing technologies or environmental monitoring infrastructure.
  • Demonstrated experience securing SCADA, ICS or OT systems.
  • Strong working knowledge of NIST, FISMA and IEC 62443 frameworks.
  • Experience working in a 24/7 mission-critical operational environment.
  • Knowledge of World Meteorological Organization data standards and international weather-data-sharing protocols.
  • One or more active professional certifications, such as CISSP, CISM, CEH, GICSP or an equivalent qualification.
  • Experience with cloud security in hybrid AWS or Azure Government environments.

Relevant Certifications

  • CISSP – Certified Information Systems Security Professional
  • CISM – Certified Information Security Manager
  • CEH – Certified Ethical Hacker
  • GICSP – Global Industrial Cyber Security Professional, which is highly valued for OT and radar-network security

Advantageous Skills

  • Knowledge of raw meteorological data-ingestion pipelines and formats, including BUFR, GRIB, NetCDF, IWXXM and GeoJSON.

Soft Skills and Attributes

  • Calm under pressure: Able to make critical security decisions quickly during severe weather events when systems are under maximum operational stress.
  • Strong communication: Able to translate complex cybersecurity threats into practical advice for non-technical meteorological staff and agency executives.
  • Analytical mindset: Strong problem-solving skills and a keen eye for identifying anomalies in large-scale data workflows. /Ref: T24-234
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against MyCareersFuture's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on MyCareersFuture's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    MyCareersFuture's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.