Information Security Officer

Job Description:Position Overview The IT Security Officer is responsible for protecting the integrity, availability, and confidentiality of key operational technology infrastructure within the Meteorological Service Singapore. This role bridges cybersecurity expertise with an understanding of specialized environmental monitoring technologies, ensuring that weather observation, forecasting, and dissemination systems remain secure, resilient, and compliant with national standards.Key ResponsibilitiesOT Asset Discovery & Architecture Mapping• Use passive, non-disruptive monitoring tools to discover OT assets across meteorological networks without impacting live operations.• Maintain a comprehensive OT Asset Register covering all hardware, firmware, software, and network connectivity. Flag all shadow or unmanaged devices.• Review and document the IT/OT network architecture, producing topology diagrams that capture OT-to-IT connectivity, remote access paths, vendor interfaces, and boundary crossing points, each risk-rated.• Map operational data flows between OT and IT systems to identify lateral attack paths, including where meteorological process data crosses into less-secure corporate network segments.• Maintain the OT Asset Register and IT/OT Network Architecture Map as the foundational security baseline for all vulnerability assessments, risk management, and incident response activities.Training & Security Awareness • Develop and deliver cybersecurity awareness training tailored to the division’s operational context, including threats specific to environmental monitoring infrastructure.• Serve as the primary OT security expert for the division. Required Qualifications• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field. • Minimum 5 years of experience in IT/OT security roles, preferably within critical infrastructure, government, or scientific/technical environments.• Proficiency with SIEM platforms, intrusion detection/prevention systems (IDS/IPS), and endpoint detection tools.• Active or ability to obtain a government security clearance at the required leve