Assistant Director (Cybersecurity Labelling Scheme), Assurance Division

To lead the development, implementation and operation of Singapore's national cybersecurity labelling schemes, including the Cybersecurity Labelling Scheme (CLS) for consumer IoT and medical devices. The role develops scheme policies, requirements and assessment methodologies; oversees product assessments and testing laboratories; drives industry and international partnerships; and strengthens the schemes in response to evolving technologies and cybersecurity risks. Through these efforts, the role supports the availability and adoption of more secure products and strengthens Singapore's cybersecurity ecosystem.

Responsibilities:

1. Cybersecurity Labelling Scheme Governance and Operations

- Lead the implementation and day-to-day operation of cybersecurity labelling schemes, including CLS for consumer IoT, CLS for medical devices and related or future labelling initiatives.

- Translate CSA's strategic objectives into scheme policies, requirements, assessment methodologies, operational processes and implementation plans.

- Oversee the assessment and labelling of products, ensuring that applications are evaluated consistently, objectively and in accordance with scheme requirements.

- Provide technical and policy guidance on complex or novel applications, including interpretation of scheme requirements and resolution of assessment issues.

- Establish and continually improve internal processes, review guidelines, work instructions, systems and tools to enhance assessment quality, consistency, efficiency and turnaround time.

- Plan and manage application demand, resources and operational priorities to ensure the schemes remain scalable and sustainable.

- Manage disputes and technical disagreements involving applicants, manufacturers and testing laboratories, escalating significant policy or risk issues where appropriate.

2. Scheme Development, Standards and Technical Capability

- Monitor cybersecurity, technology and regulatory developments to identify emerging risks, product categories and opportunities for new or enhanced cybersecurity labelling schemes.

- Develop and review cybersecurity requirements, assessment methodologies and technical guidance, taking into account security risks, industry practices, international standards and operational feasibility.

- Evaluate relevant international standards and frameworks for adoption or alignment within CSA's schemes.

- Lead technical studies, pilots and capability development to improve the effectiveness, scalability and efficiency of product cybersecurity assessments.

- Guide the development and application of cybersecurity testing capabilities for consumer IoT, medical devices and other emerging technology areas.

- Explore the use of new technologies, automation and AI to improve scheme administration, assessment and market surveillance.

3. Ecosystem, Industry and Government Partnerships

- Develop and maintain strategic partnerships with government agencies, industry associations, manufacturers, healthcare stakeholders, testing laboratories and other relevant organisations to support adoption and development of the schemes.

- Engage manufacturers and developers to strengthen understanding of scheme requirements and encourage security-by-design practices.

- Develop outreach and adoption strategies to increase awareness and use of cybersecurity labels among consumers, enterprises, healthcare institutions and other relevant users.

- Develop the local Testing, Inspection and Certification (TIC) ecosystem by onboarding and developing competent testing laboratories and supporting evaluator capability development.

- Oversee Approved Testing Laboratories, including their performance, compliance with scheme requirements and quality of assessment outcomes.

- Conduct industry engagement, landscape studies and other forms of stakeholder research to identify opportunities to strengthen scheme adoption and effectiveness.

4. International Cooperation and Recognition

- Represent CSA and Singapore at relevant international forums, standards bodies and government-to-government engagements relating to cybersecurity labelling and product security.

- Develop partnerships with overseas cybersecurity authorities and like-minded jurisdictions to promote international alignment and mutual recognition of cybersecurity labelling schemes.

- Monitor international regulatory, standards and policy developments and assess their implications for Singapore's schemes.

- Contribute to the development and harmonisation of international cybersecurity standards, labelling requirements and assessment approaches.

- Support Singapore's international thought leadership by sharing CSA's experience and approaches at relevant international platforms.

Requirements

- Bachelors Degree in Computer Science, Information Systems, Mathematics, or relevant discipline.

- 7-10 years of working experience.

- Good interpersonal relationships skills,

- Effective communication skills,

- Team player while still being able to work independently,

- Creative, able to think out of the box.