We seek a results-driven officer to drive digital transformation governance through automation and developing data insights. You will work with a multi-disciplinary team such as the specialists, engineers and policy developers to cultivate an adaptive governance environment that empowers agencies to deliver innovative, cost-effective digital products and services efficiently and on time. It ensures quality delivery while balancing innovation with appropriate risk mitigation.

Job Purpose:

To drive digital transformation governance that empowers agencies to deliver innovative, cost-effective digital products and services efficiently and on time.

• Develop and maintain policies as codes using OSCAL (Open Security Controls Assessment Language), ensuring machine-readable security and compliance requirements that enable automation and continuous monitoring.
• Collaborate with various stakeholders (e.g. product, engineering, security, compliance, audit teams) to ensure successful transformation of ICT&SS policies to new IM8, facilitating smooth transition and implementation across agencies.
• Drive adoption of ICT&SS policies through seamless automation and integration, enabling more timely and efficient compliance monitoring and reporting through automated tools and workflows.
• Develop insights of Agencies' ICT&SS and compliance gaps through data analytics and monitoring tools to enable more timely intervention and remediation, providing actionable recommendations for improvement.
• Identify any systemic and/or concentrated risks that could affect the confidentiality, integrity and availability of government ICT&SS, implementing appropriate controls and mitigation strategies.

Required Qualifications and Experience:

• Minimum 3 years of experience in software engineering, ICT governance, security compliance, or related roles
• Strong understanding of OSCAL and policy-as-code implementations
• Experience with government ICT&SS policies and compliance standards

Technical Skills:

• Proficiency in OSCAL and policy-as-code development
• Strong knowledge of security compliance automation tools
• Experience with risk assessment and management frameworks
• Understanding of modern security architectures and controls
• Data analytics and reporting capabilities

Soft Skills:

• Strong stakeholder management and collaboration abilities
• Excellent communication skills to explain technical concepts to various audiences
• Strategic thinking with attention to detail
• Problem-solving and analytical capabilities

Key Performance Indicators:

• Successful implementation of policies-as-code using OSCAL
• Reduction in compliance assessment and reporting time
• Improvement in agencies' compliance rates
• Effectiveness of risk identification and mitigation strategies
• Stakeholder satisfaction with governance automation

Required Knowledge:

• Deep understanding of government ICT security policies and standards
• Knowledge of IM8 framework and requirements
• Familiarity with compliance automation tools and practices
• Understanding of security risk management principles

GovTech is an equal opportunity employer committed to fostering an inclusive workplace that values diverse voices and perspectives, as we believe it is key to innovation. 

Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks.

We champion flexible work arrangements (subject to your job role) and trust you to manage your time to deliver your best.

Learn more about life inside GovTech at go.gov.sg/GovTechCareers.