Cybersecurity Specialist (Exposure Management) (Information Security Department) [NIE] Full-time

Cybersecurity Specialist (Exposure Management)

The National Institute of Education (NIE), Singapore, is Singapore's national teacher education institute and we are proud to be an integral part of the nation's education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to apply for the position of Cybersecurity Specialist (Exposure Management) within the Division of Academic Computing & Information Services (ACIS).

Key Responsibilities

• Manage exposure assessment activities across applications, operating systems, cloud platforms, and enterprise environments.
• Support the Vulnerability Disclosure Programme (VDP), bug bounty activities, and security testing initiatives.
• Conduct penetration testing, configuration reviews, compliance assessments, and AI-assisted security testing.
• Monitor and analyse external attack surface, cloud, and identity exposures to identify security risks.
• Prioritise and coordinate remediation activities based on risk, business impact, and threat exposure.
• Track remediation progress, manage security exceptions, and validate the effectiveness of implemented fixes.
• Support cybersecurity incident investigations by identifying vulnerabilities and exposures contributing to security incidents.
• Support the implementation, enhancement, and operationalisation of cybersecurity technologies, solutions, AI and security projects.
• Drive process improvement, automation, and continuous enhancement initiatives to improve cybersecurity effectiveness and operational efficiency.

Requirements

• A University degree in Information Systems, Computer Science, Cybersecurity, or a related discipline.
• Minimum 3 years of relevant experience in vulnerability management, exposure management, security testing, or cybersecurity operations.
• Experience conducting vulnerability assessments, remediation tracking, and security risk analysis across enterprise environments.
• Knowledge of operating systems, web applications, cloud technologies, identity security, and common cybersecurity threats.
• Familiarity with penetration testing, attack surface management, configuration assessment, and security assessment methodologies.
• Understanding of vulnerability management processes, risk assessment methodologies, and remediation lifecycle management.
• Ability to assess security risks, prioritise remediation activities, and validate remediation effectiveness.
• Experience coordinating remediation efforts with technical teams, system owners, vendors, and other stakeholders.
• Familiarity with incident response processes, security investigations, and cybersecurity operations concepts would be advantageous.
• Strong analytical, communication, stakeholder management, and problem-solving skills, with an interest in continuous improvement, security automation, and emerging cybersecurity technologies.

Closing Date The closing date of the advertisement is 9 November 2026. We regret that only shortlisted candidates will be notified.

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Hiring Institution: NIE