[What the role is]

[What you will be working on]

You will play a key role in safeguarding the cybersecurity of vehicles on Singapore's roads. You will contribute to the regulatory oversight, technical audits, and compliance assessments of vehicle cybersecurity systems submitted for approval — evaluating technical evidence, conducting structured audits, investigating cybersecurity incidents, and performing targeted technical checks as part of the vehicle approval process. Your key responsibilities include:

• Regulatory Audit Assessment — Evaluate cybersecurity documentation and test reports to ensure compliance with relevant standards and requirements, including assessments based on Cybersecurity Assurance Levels (CAL). Where necessary, you may conduct penetration testing, fuzzing, and vulnerability scanning to assess a vehicle's cybersecurity posture and identify potential vulnerabilities.

• Incident Investigation — Lead and support cybersecurity incident investigations involving approved vehicles or in-market fleets. Analyse technical evidence, assess the scope and severity of incidents, and determine whether manufacturers have fulfilled their obligations under applicable regulations. Technical testing may be conducted on a case-by-case basis to support findings.

• Review of Annual Reports — Assess the completeness and technical rigour of cybersecurity annual reports submitted by manufacturers, including test logs and Vehicle Security Operation Centre (vSOC) monitoring data. Ensure that the evidence meets the standards required for regulatory acceptance.

[What we are looking for]

• Knowledge in Information Technology, Computer Security, Computer Science, or any other relevant fields

• At least 3 years of relevant experience in automotive cybersecurity or a related technical field

• Strong analytical and problem-solving skills

• Excellent communication and teamwork abilities, with a proactive approach to collaboration

Familiarity with the following will be advantageous:

• Automotive cybersecurity standards, including ISO/SAE 21434, ISO 27001, and UN Regulations No. 155 & 156.

• Embedded security concepts such as HSM, Secure Boot, and SecOC, along with vehicle communication protocols (e.g., CAN, LIN, Automotive Ethernet) and their security implications.

• Vulnerability assessment techniques including threat modelling, fuzzing, and penetration testing, particularly in the context of connected vehicle components and attack surfaces such as telematics units, infotainment systems, and wireless interfaces.

• Technical audit and investigation skills, including the ability to review cybersecurity documentation, produce clear and defensible findings, and conduct basic digital forensics such as evidence handling and technical analysis across vehicle systems.

As part of the shortlisting process for the role, you may be required to complete a medical declaration and /or undergo further assessment.