The posting
Join us to Transform Lives!
Autism Resource Centre (Singapore) or ARC(S), is a not-for-profit charity based in Singapore. ARC(S) is dedicated to serving children and adults on the autism spectrum, to help these individuals lead meaningful and independent lives in society. ARC (S) offers a wide range of services: Pathlight School, and two social enterprises, The Art Faculty and Professor Brawn.
Pathlight School is the first autism-focused school in Singapore to offer a unique blend of mainstream academic curriculum and life readiness skills. We are currently the largest special education school in Singapore and due to our further expansion, we invite candidates who have proven commitment and competence to join us in the role of Assistant IT Manager – Infrastructure & Cyber Security.
The Team:
The Information Technology (IT) provides an enabling, robust and supportive technological environment to empower users guided by principles of accountability, security and privacy. Ultimately, it is the rocket fuel of the organisation, jetting it forward and yet safe to use.
Your Impact and Contribution:
We are looking for an experienced technology leader to help us realise our vision of building the next-gen learning community of empowered future technology leaders and learners. Reporting to the Head of Department, this role combines hands-on ownership of the organisation’s network and security estate with responsibility for department planning and the development of the IT team.
You will own the security of a network serving thousands of students across multiple campuses — the firewalls, the SD-WAN, the wireless estate and a hybrid Windows and Apple endpoint environment. Beyond technical execution, the role holds cyber security governance for the organisation: setting the policies and controls, and assuring them through testing. You will be the person who decides what good looks like, proves it, teaches it, and builds a team that can sustain it.
What You’re Involved In:
1. Department Strategy & Planning
- Contribute to the IT strategy and technology roadmap in line with the direction of the organisation, translating curriculum, operational and compliance needs into IT plans and priorities.
- Develop the annual IT work plan and project portfolio with the Head of Department, and track and report on delivery.
- Plan technology lifecycle and refresh cycles across infrastructure, endpoints and services.
- Prepare and justify the annual IT budget with the Head of Department, monitor expenditure against budget, and prepare business cases for new technology investment.
2. Team Leadership & Supervision
- Supervise the IT team with the Head of Department — work allocation, priorities, quality of delivery and escalation.
- Set objectives, conduct performance reviews and support development, building technical capability across the team and reducing single-person dependency on critical systems.
- Plan team coverage across term time, examination periods, school holidays and campus events.
- Foster a culture of documentation, service ownership and continuous improvement.
3. Network & Server Infrastructure
- Own the administration, management and monitoring of the organisation’s network infrastructure and services across all campuses and partner schools.
- Administer and optimise the organisation’s Fortinet firewalls — security policy, VPN, web filtering and threat inspection, firmware lifecycle and rule base documentation.
- Administer and optimise the organisation-wide SD-WAN and HPE Aruba wired and wireless infrastructure — configuration, failover assurance, switching, controllers, access points and network access control.
- Lead the resolution of escalated network and security faults, including root cause analysis, drive vendors and principal support to closure, and implement preventive measures to reduce recurrence.
- Own network segmentation, VLAN design and IP address management, and provide design and planning input for network services at new and existing campuses.
- Administer core server and directory services — Windows Server, Active Directory, DNS, DHCP, file services and virtualisation — including patching, hardening, backup and capacity planning.
- Ensure 100% daily readiness of all physical and virtual network and server services. Lead the timely renewal of hardware and service support contracts.
4. Cyber Security Governance
- Own, develop and maintain the organisation’s cyber security policies, standards and procedures, including the review cycle.
- Design, implement and assure security controls across infrastructure, endpoints and cloud services.
- Maintain the IT risk register, track remediation, and report on the organisation’s security posture, incidents and findings to management.
- Ensure compliance with PDPA, MOE and other applicable requirements, and conduct security assessment of third parties and vendors prior to engagement and at renewal.
5. Security Operations
- Hybrid identity security across Active Directory, Microsoft 365 and Entra ID — Conditional Access, identity protection, privileged access and authentication policy.
- Email and endpoint security — endpoint protection platform, anti-phishing and anti-spam policy, alert triage and response.
- Endpoint management across a hybrid Windows and Apple estate — ManageEngine Desktop Central and Jamf, device enrolment, compliance policies, patch deployment and platform hardening, with vulnerability scanning and remediation tracking across both platforms.
- Security monitoring and incident response, including post-incident review, and assurance of backup, recovery and business continuity arrangements.
6. Security Assurance & Awareness
- Plan, scope and coordinate penetration testing and vulnerability assessment with appointed vendors, and track findings to closure against agreed timelines.
- Plan and run phishing simulation exercises, analyse results and target follow-up training.
- Coordinate incident response and disaster recovery exercises, and document outcomes and lessons learnt.
- Develop and run the staff cyber security awareness programme, including onboarding and refresher training pitched for both technical and non-technical staff, and measure its effectiveness.
7. Management, Procurement & Internal Operations
- Manage technical evaluation and procurement of network and security hardware, software and cloud services.
- Manage vendors, support contracts and renewal cycles, including SLA performance and escalation, ensuring the organisation receives value from its technology investments.
- Ensure system and service readiness, and appropriate monitoring of IT systems and services.
- Develop and maintain standard operating procedures, runbooks and technical documentation.
- Provide technical direction on complex issues, act as the senior escalation point for the team, and regularly give status reports across projects.
- Strictly adhere to and preserve the confidentiality of all IT systems and services, and comply with and help to enforce organisation-wide policies and procedures.
8. Communication & Stakeholder Engagement
- Point of contact on cyber security, network and IT service matters.
- Work with leaders and departments across the organisation to understand their needs and advise on IT solutions.
- Present IT plans, service performance and security posture to management.
- Represent the organisation in liaison with MOE, partner schools and external parties on IT matters.
- Relay relevant IT-related information to staff, and respond and act on leader’s direction.
- Any other responsibilities as assigned by Head of Department
Requirements
Your must-haves
- Degree qualification in Information Technology, Cyber Security or a related field, or equivalent experience
- At least 6 to 10 years of progressive experience in IT infrastructure and cyber security, including at least 3 years supervising a technical team
- Experience contributing to IT strategy, annual work planning and budget preparation
- Hands-on experience administering enterprise firewalls and wired and wireless network infrastructure
- Hands-on experience managing and securing a hybrid Windows and Apple (macOS and iOS) endpoint estate
- Experience administering core server and identity infrastructure — Windows Server, Active Directory, DNS, DHCP — together with Microsoft 365 and Entra ID security in a hybrid environment
- Experience in cyber security governance — policies, controls assurance and risk reporting
- Able to work in a fast-paced environment
Your good-to-haves
- Hands-on experience with any of the platforms in our environment — Fortinet firewalls, HPE Aruba wired and wireless networking, SD-WAN, ManageEngine Desktop Central or Jamf
- Experience coordinating penetration testing, and running security awareness training and phishing simulation exercises
- Experience leading escalated fault resolution with vendors, and managing IT services across multiple locations
- Professional certification in one or more of the following: Fortinet, HPE Aruba Networking, Jamf, Microsoft security (such as SC-200 or SC-300), CISSP, CISM, CompTIA Security+ or ITIL
- Experience in the education or public sector, including MOE systems and data protection practice under PDPA
- Foundational knowledge of procurement workflows (sourcing, PR/PO cycles, and vendor management)
- Good written, verbal and visual communication skills, including the ability to explain security matters to non-technical staff
- Hands-on and self-motivated, able to work independently and in a team setting
- Desire to learn about autism and the passion to serve the autism community
Benefits
We offer a competitive remuneration package and the professional advantages of a dynamic workplace that enables your professional development and values your contributions.
We seek your understanding that only shortlisted candidates will be notified.
Our organisation is committed to protecting our children and young people from harm. We require all applicants to undergo a comprehensive screening process prior to hire.
