Deputy Director (Cyber Analysis & Operations)

The key duties and responsibilities are to:

• →Provide executive leadership for 24/7 MCAOC operations, including real-time threat monitoring, anomaly detection, incident response, and recovery for maritime IT/OT environments.
• →Develop and execute security operations centre (SOC) strategy, integrating cyber threat intelligence, red teaming, threat hunting, and AI-driven analytics to safeguard port operations, vessels, and offshore assets.
• →Establish and maintain cyber incident response frameworks, playbooks, and sectoral-level exercises (e.g., TTX simulations) for maritime critical information infrastructure (CII) protection.
• →Oversee convergence of IT/OT cybersecurity requirements with Integrated Operations Centre, enterprise architecture, and CII owners for holistic risk management.
• →Drive automation, SOAR, SIEM/EDR enhancements, and data linkages for early warning of cyber threats impacting navigational safety and business continuity.
• →Lead investigations, vulnerability assessments, and remediation for MPA digital systems and CII partners, ensuring compliance with Singapore cybersecurity regulations and standards.
• →Deliver executive dashboards and reports on SOC metrics (MTTD/MTTR), threat trends, and resilience posture to MPA CISO, leadership and national stakeholders.
• →Foster partnerships with industry, research community, and international ports for information sharing and operational enhancements.
• →Build and mentor a high-performing SOC team, emphasizing maritime-specific skills in OT/ICS security and Maritime Shipboard Operational Technology (MariOT) testbed training initiatives.

• Background in Cybersecurity, Computer Science, or related field.
• 12–15+ years in cybersecurity, with 7+ years leading SOC operations.
• Deep expertise in IT/OT convergence, CII protection, red teaming, and incident management.
• Proficiency in SIEM, EDR, NDR, SOAR, threat intelligence platforms, and cyber tools.
• Strong executive communication for board-level reporting and crisis leadership.
• Experience in Singapore government/critical infrastructure cybersecurity.

Preferred Qualifications

• Certifications: CISSP, CISM, GIAC (GCIH/GCIA), or equivalent.

Key Success Indicators

• Enhanced MTTD/MTTR and zero major incidents impacting port operations.
• High team maturity, retention, and contributions to sectoral and  national cyber exercises