Job Description

Singapore Post is rebuilding significant parts of its technology landscape, spanning cloud, applications, data, AI, integration, automation and operational technology.
The DVP, Cyber Defence & Resilience will lead Singapore Post's cyber defence, security engineering and resilience agenda.

This role will own Singapore Post's cyber defence and resilience agenda across enterprise IT, cloud, applications, software engineering, AI and selected OT environments. The mandate is twofold: get the fundamentals right, while preparing Singapore Post for the next generation of AI-enabled cyber threats.
This role will need to understand how modern systems are built, how attackers think, and how security can be engineered directly into architecture, software delivery and operations.

Singapore Post plays an important role in Singapore's logistics infrastructure. Our systems support postal, parcel and logistics operations that must continue functioning during disruption. Resilience is therefore as important as prevention.

Cyber Defence & Resilience

● Strengthen cybersecurity across identity, endpoints, networks, cloud, applications, APIs, data,

vulnerability management, incident response and recovery.

● Improve vulnerability management, threat detection, incident response, ransomware preparedness

and recovery.

● Reduce attack surface, lateral movement and blast radius.

● Build measurable improvements in detection, containment and remediation.

Secure Software Engineering

● Embed security directly into CI/CD and software development.

● Implement automated code, dependency, container, secrets and infrastructure-as-code scanning.

● Introduce appropriate security gates, SBOMs, artifact integrity and policy-as-code.

● Work closely with architecture and engineering teams to make secure-by-design the default.

AI Security & AI-enabled Defence

● Prepare Singapore Post for increasingly AI-assisted and autonomous cyber attacks.

● Explore the responsible use of frontier models and modern security platforms to improve

vulnerability discovery, threat hunting, detection and remediation.

● Secure SingPost's own GenAI and agentic AI environments against risks such as prompt injection,data leakage, excessive agency, poisoned context, insecure tools and autonomous actions.

● Establish appropriate security controls around AI agents, identities, APIs, data and enterprise

systems.

Cloud & Modern Architecture

● Work closely with the Chief Architect and engineering teams on cloud security, zero trust, workload

identity, API security, Kubernetes, secrets management and observability.

● Ensure security is designed into Singapore Post's emerging architecture rather than added after

implementation.

IT / OT Security

● Lead cybersecurity across enterprise IT and operational environments including sortation, automation,

robotics and other connected systems.

● Support selected OT environments including sortation, automation, robotics and connected operational

systems.

● Develop practical controls that balance cybersecurity, safety and operational continuity.

Offensive Security

● Strengthen red teaming, penetration testing, threat modelling, adversarial testing and attack simulation.

● Continuously challenge our architecture with the question: How would an attacker break this?

Team Management

● Lead, mentor, and develop a team of 4 cybersecurity staff, fostering a collaborative and high-performing environment.

Requirements

Education and Experience

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• At least 10 years of relevant experience in designing, developing, securing, and scaling complex, production-grade systems across hardware and software environments.
• Proven ability to communicate cybersecurity strategies, initiatives, progress, key risks, and major security incidents clearly and effectively to both technical and executive stakeholders.
• Experience with modern cloud-native security platforms and tools (e.g. Wiz), as well as AI-assisted cybersecurity solutions, would be an added advantage.
  

Preferred Knowledge, Skills and Competencies

• Strong technical knowledge and practical experience in the following areas:Cloud security architecture and cloud-native security technologies.Identity and Access Management (IAM) and Zero Trust architecture.API security, Kubernetes, network security, and operating system security.Software vulnerabilities, application security, and secure software development practices.CI/CD pipeline security and secrets management.Detection engineering, security monitoring, observability, and incident response.AI and Large Language Model (LLM) security.Software supply chain security.
• Ability to assess and address security risks across complex technology environments, balancing security requirements with system scalability, resilience, and operational effectiveness.