Cybersecurity Specialist

About the Role

As a Cybersecurity Specialist at Changi Airport Group, you will be instrumental in safeguarding airport systems, infrastructure, and digital assets from cyberattacks and data breaches. This role involves a blend of proactive vulnerability management, stringent application of security controls, and rapid incident response, ensuring the continuous security posture of Changi's critical operations.

Key Responsibilities

• Vulnerability Management: Assess cybersecurity aspects of design proposals for systems, applications, and infrastructure. Manage external service providers for annual vulnerability assessments and penetration testing, identifying weaknesses and recommending remediation.
• Security Controls Implementation: Recommend and apply security measures based on industry best practices and standards (e.g., OWASP Top 10, NIST, CIS) for compliance and threat intelligence. Contribute to developing and maintaining security policies, procedures, configurations, and standards aligned with ISO 27001. Participate in internal audits of the Information Security Management System (ISMS).
• Secure Development Practices: Integrate OWASP Top 10 recommendations throughout the Software Development Lifecycle (SDLC), focusing on secure coding and design principles. Collaborate with developers to identify and remediate application security vulnerabilities.
• Incident Response and Recovery: Review logs for malicious activity and data breaches. Coordinate with contractors, security vendors, and internal Changi Airport Group teams to strategize incident isolation, root cause identification, and implement mitigation/recovery procedures.
• Threat Intelligence: Stay current with evolving cybersecurity threats, vulnerabilities, mitigation techniques, and emerging technologies through training, publications, and conferences.
• Collaboration and Awareness: Work closely with security professionals and the governance team to educate colleagues on security best practices and raise awareness of potential threats.

Qualifications

• Good degree in Information Systems/Technology, Computer Engineering, Computer Science, Information and Communications Technology (ICT) or a related field.
• Preferably possess professional certifications such as CISSP, CISA, CISM, CompTIA Security+, or equivalent.
• Solid knowledge of cybersecurity principles and best practices, with ideally at least 5 years of relevant experience in managing contractors and designing cybersecurity solutions to meet guidelines and standards.
• Experience in preparing tender specifications for vulnerability assessment, penetration testing, and creating Standard Operating Procedures (SOPs) for security incident response.
• Proficiency in security tools, log extraction methods, and technologies.
• A curious mind, proactive in detecting potential cyber threats and developing countermeasures.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills.
• Ability to work independently and as part of a team.

Key skills/competency

• Vulnerability Management
• Penetration Testing
• Incident Response
• Security Policies
• ISO 27001
• OWASP Top 10
• CISSP/CISM/CISA
• Threat Intelligence
• Secure SDLC
• Log Analysis