Assistant Director/Section Head (Operations and Implementation Support)

Role overview

The Civil Aviation Authority of Singapore is seeking an experienced and motivated engineering professional to join the Operations and Implementation Support (OIS) Section within the Cybersecurity Division, with attachment to the Air Traffic Management Branch under the Air Navigation Services Engineering Division. The role focuses on planning, designing, integrating, improving, and innovating the next generation of Air Navigation Services systems, with strong emphasis on cybersecurity for mission-critical Communications, Navigation Aid, Surveillance and Air Traffic Management systems.

Cybersecurity is central to keeping Singapore’s air hub safe and resilient. The selected candidate will help shape and review the cybersecurity architecture for both existing and future Air Navigation Services systems, ensuring they remain protected against fast-changing threats and continue to support highly available, software-intensive operations.

Key work areas

The position involves reviewing system infrastructure, design and architecture to ensure cybersecurity considerations are built in and aligned with government IM8 requirements. The role also supports the deployment of cyber and data security controls, as well as incident response and incident management for these systems.

Depending on the stage of the system lifecycle, the candidate will be involved in defining technical requirements, assessing proposed solutions, securing the necessary approvals, carrying out enhancement implementation or technical refresh activities, and supporting system maintenance.

Responsibilities

• Oversee Air Navigation Services projects and systems, including cybersecurity implementations, security architecture, technology platforms, security policies and procedures, and solutions such as authentication, perimeter protection and compliance tools.
• Put in place measures that strengthen the cybersecurity stance of the systems and satisfy CAAS, national and international standards and requirements.
• Work with internal and external stakeholders such as government agencies, system vendors, maintenance teams, operational users, IT consultants and auditors to coordinate meetings, provide support and validate implementation efforts.
• Support internal and external audit activities, including technical discussions, audit follow-ups, scanning exercises and penetration testing.
• Develop and refine cybersecurity processes and procedures through ongoing engagement with regulators, industry participants and relevant agencies.
• Track new cybersecurity practices, technologies, threats and vulnerabilities, and recommend suitable controls to improve the security posture of the ANS systems.
• Investigate security incidents to identify root causes, collaborate with stakeholders to resolve them, prepare post-incident reports, and drive enhancements to close security gaps.
• Maintain security documentation and contribute to the ANS Group’s security programme, including planning and delivering training to strengthen cybersecurity and assurance awareness.
• Coordinate audit-related matters and participate in technical reviews and internal audit activities such as vulnerability scans and penetration tests.

Requirements

• Background in Cybersecurity, Information Security, Information Technology, Computer Science, or Engineering disciplines such as Computing, Electrical, Electronics or Telecommunication, or an equivalent qualification.
• Professional credentials such as CISA or CISSP will be considered an advantage.
• Current certification in Cybersecurity or Information Security from ISACA, (ISC)2 or a similar body will be a plus.
• About 8 to 10 years of relevant experience in system project implementation, cybersecurity compliance, or cybersecurity work in ICT infrastructure or network implementation.
• Proven experience managing cybersecurity projects, ideally across at least one full project implementation lifecycle.
• Strong understanding of security governance and risk management, controls, vulnerability assessment and penetration testing, compliance, business continuity, investigations, system architecture and design, as well as legal and industry cybersecurity best practices.
• Ability to connect cybersecurity work to broader business objectives.
• Self-driven, independent, collaborative and equipped with a practical, can-do approach.
• Genuine interest in cybersecurity and a hacker mindset.
• Strong verbal and written communication, presentation, negotiation and interpersonal skills.

Additional information

The appointment level will depend on the candidate’s relevant experience. Successful candidates will be offered a 3-year contract initially and may later be considered for permanent placement or contract renewal.

Candidates who are passionate about contributing to aviation cybersecurity are encouraged to apply.