Deputy Director (Cyber Analysis & Operations)

[What the role is]

The Deputy Director of Cybersecurity Analysis and Operations Department leads the strategic and operational direction of MPA’s Maritime Cyber Assurance and Operations Centre (MCAOC), ensuring 24/7 protection of MPA digital systems. This executive role drives cyber defense for port operations, vessels, onshore IT/OT systems, and national maritime resilience, collaborating with industry, government agencies, and international partners to counter evolving threats.

[What you will be working on]

The key duties and responsibilities are to:

• Provide executive leadership for 24/7 MCAOC operations, including real-time threat monitoring, anomaly detection, incident response, and recovery for maritime IT/OT environments.
• Develop and execute security operations centre (SOC) strategy, integrating cyber threat intelligence, red teaming, threat hunting, and AI-driven analytics to safeguard port operations, vessels, and offshore assets.
• Establish and maintain cyber incident response frameworks, playbooks, and sectoral-level exercises (e.g., TTX simulations) for maritime critical information infrastructure (CII) protection.
• Oversee convergence of IT/OT cybersecurity requirements with Integrated Operations Centre, enterprise architecture, and CII owners for holistic risk management.
• Drive automation, SOAR, SIEM/EDR enhancements, and data linkages for early warning of cyber threats impacting navigational safety and business continuity.
• Lead investigations, vulnerability assessments, and remediation for MPA digital systems and CII partners, ensuring compliance with Singapore cybersecurity regulations and standards.
• Deliver executive dashboards and reports on SOC metrics (MTTD/MTTR), threat trends, and resilience posture to MPA CISO, leadership and national stakeholders.
• Foster partnerships with industry, research community, and international ports for information sharing and operational enhancements.
• Build and mentor a high-performing SOC team, emphasizing maritime-specific skills in OT/ICS security and Maritime Shipboard Operational Technology (MariOT) testbed training initiatives.

[What we are looking for]

• Background in Cybersecurity, Computer Science, or related field.
• 12–15+ years in cybersecurity, with 7+ years leading SOC operations.
• Deep expertise in IT/OT convergence, CII protection, red teaming, and incident management.
• Proficiency in SIEM, EDR, NDR, SOAR, threat intelligence platforms, and cyber tools.
• Strong executive communication for board-level reporting and crisis leadership.
• Experience in Singapore government/critical infrastructure cybersecurity.

Preferred Qualifications

• Certifications: CISSP, CISM, GIAC (GCIH/GCIA), or equivalent.

Key Success Indicators

• Enhanced MTTD/MTTR and zero major incidents impacting port operations.
• High team maturity, retention, and contributions to sectoral and national cyber exercises

Successful candidates will be offered a 2-year contract in the first instance and may be considered for an extension or placement on a permanent appointment.