W
IT Security Officer (Public Sector)
Search Jobs
Search by job, company or skills
Search by job, company or skills
Position Overview
The IT Security Officer is responsible for protecting the integrity, availability and confidentiality of key operational technology infrastructure within the Meteorological Service Singapore.
The role combines cybersecurity expertise with an understanding of specialised environmental monitoring technologies, ensuring that weather observation, forecasting and dissemination systems remain secure, resilient and compliant with national standards.
Key Responsibilities
OT Asset Discovery and Architecture Mapping
Use passive, non-disruptive monitoring tools to identify OT assets across meteorological networks without affecting live operations.
Maintain a comprehensive OT Asset Register covering all hardware, firmware, software and network connectivity.
Identify and flag all shadow or unmanaged devices.
Review and document the IT/OT network architecture.
Produce topology diagrams showing OT-to-IT connectivity, remote-access paths, vendor interfaces and boundary-crossing points, with each area appropriately risk-rated.
Map operational data flows between OT and IT systems to identify potential lateral attack paths, including points where meteorological process data enters less-secure corporate network segments.
Maintain the OT Asset Register and IT/OT Network Architecture Map as the foundational security baseline for vulnerability assessments, risk management and incident-response activities.
Security Operations and Monitoring
Monitor and protect OT supporting meteorological systems, including weather radar networks such as Doppler Weather Radar S/C Bands, satellite ground stations, upper-air sounding systems and automated weather observation systems.
Operate and maintain Security Information and Event Management (SIEM) tools to detect anomalies across hybrid IT/OT environments.
Work closely with the agency's Chief Information Security Officer to manage and deploy critical patches and address other security incidents.
Investigate and respond to security incidents, coordinating with national CERT teams and agency leadership when required.
Risk Management and Compliance
Conduct regular risk assessments across meteorological data acquisition, processing and dissemination pipelines.
Ensure compliance with relevant frameworks and standards, including NIST SP 800-82r3, FISMA, IEC 62443 and agency-specific cybersecurity policies.
Maintain and test the division's Continuity of Operations Plan and disaster-recovery procedures to minimise disruption to critical weather services.
Vulnerability Management
Perform and coordinate regular vulnerability scans, penetration tests and security audits of relevant systems.
Manage patching cycles in close coordination with systems engineers, balancing security requirements against the 24/7 operational uptime requirements of weather services.
Vendor and Supply Chain Security
Evaluate third-party hardware and software used in meteorological systems, including sensors, data feeds and vendor-supplied processing software, for supply-chain risks.
Review and enforce security requirements in contracts with technology vendors and data partners.
Training and Security Awareness
Develop and deliver cybersecurity awareness training tailored to the division's operational environment, including threats specific to environmental monitoring infrastructure.
Serve as the division's primary OT security expert.
Required Qualifications
Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field.
At least five years of experience in IT/OT security roles, preferably within critical infrastructure, government or scientific and technical environments.
Proficiency with SIEM platforms, intrusion detection and prevention systems, and endpoint detection tools.
Active government security clearance at the required level, or the ability to obtain one.
Preferred Qualifications
Familiarity with meteorological systems, remote-sensing technologies or environmental monitoring infrastructure.
Demonstrated experience securing SCADA, ICS or OT systems.
Strong working knowledge of NIST, FISMA and IEC 62443 frameworks.
Experience working in a 24/7 mission-critical operational environment.
Knowledge of World Meteorological Organization data standards and international weather-data-sharing protocols.
One or more active professional certifications, such as CISSP, CISM, CEH, GICSP or an equivalent qualification.
Experience with cloud security in hybrid AWS or Azure Government environments.
Relevant Certifications
CISSP - Certified Information Systems Security Professional
CISM - Certified Information Security Manager
CEH - Certified Ethical Hacker
GICSP - Global Industrial Cyber Security Professional, which is highly valued for OT and radar-network security
Advantageous Skills
Knowledge of raw meteorological data-ingestion pipelines and formats, including BUFR, GRIB, NetCDF, IWXXM and GeoJSON.
Soft Skills and Attributes
Calm under pressure: Able to make critical security decisions quickly during severe weather events when systems are under maximum operational stress.
Strong communication: Able to translate complex cybersecurity threats into practical advice for non-technical meteorological staff and agency executives.
Analytical mindset: Strong problem-solving skills and a keen eye for identifying anomalies in large-scale data workflows.
/Ref: T24-234
Job ID: 153686547
