INFORMATION SYSTEMS SECURITY OFFICER (ISSO)

Location: Singapore, Singapore

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

As Information System Security Officer (ISSO), you are responsible for:

• Ensuring that contractual, legal, regulatory and Thales internal compliance and governance is achieved as it relates to Information security and technology controls. This includes:
  • the projects (e.g. NexGen ATMS, LORADS-III) contractual clauses in the Conditions of Contract related to Thales obligations for Thales and its subcontractor Personal, Process and ICT Systems.
  • Thales internal policies
• Coordinate and manage protective security measures for the protection of project sensitive and classified information.
• Manage list of authorised tools and access permissions to ensure only authorised personnel access project data.
• Act as the point of contact for Engineering and configuration management staff regarding the marking and classification of artefacts, managing the process for marking and handling of sensitive information for the program
• Maintain registers of staff that have been given access to sensitive and classified information, including regular audits and the validation and approval for access requests.
• Manage Security Clearances and its process for Thales employees and its subcontractor.
• Acting as the initial point of contact for Security Information management policy and procedures.
• Conduct Information Security Management training for all project personnel.
• Maintain a Classified Documents Register of all project deliverables and other artefacts developed during the Project requiring dedicated tracking.
• Actively promote a culture of proactive security reporting and awareness, reporting any security related breaches to relevant stakeholders.
• Contribute to business continuity and disaster recovery planning
• Develop, implement, and enforce information security policies, procedures, and standards.
• Monitor and assess the security posture of information systems to identify vulnerabilities and threats.
• Conduct risk assessments and assist with risk management activities.
• Implement and manage security controls to protect sensitive information and systems.
• Ensure compliance with relevant regulatory frameworks and standards (e.g., NIST, ISO 27001, CTM, FISMA, HIPAA).
• Coordinate and support security audits, vulnerability scans, and penetration testing.
• Collaborate with IT teams, system owners, and management to address security issues.
• Maintain documentation related to project/system security plans, contingency plans, and incident reports.
• Support system authorization and accreditation processes.
• Manage security incidents, including detection, response, and recovery efforts by promptly reporting and investigating ICT security incident/breaches related to Project sensitive and classified Information and prepare and conduct (or coordinating) corrective action plans in relation to any identified breach of Thales obligations.
• In the event of an ICT security incident/breach, conducting a preliminary review to prevent further loss/damage and develop a remedial action plan.
• Ensure transversal constraints related to the security functions are considered (Safety, Human Factor, Performance, Security)
• Participate in the technical reviews and working group, including internal and with the Customer
• Contribute to the preparation of Engineering Change Proposals (ECPs) and Problem Change Requests (PCRs)
• Contribute to the management of the traceability of requirements using tools, including the Functional, Allocated and Product baselines.
• Perform peer reviews of engineering documentation written by other team members
• Keep up-to-date with emerging security threats, technologies, and industry trends.

As the Information Asset Security Manager (IASM), you are responsible for:

• Develop and maintain the Information NexGen Security Information policy and procedures for internal Business Managed Systems hosting sensitive and classified information.
• Lead the Thales internal, ISO 27001 and CTM certifications of Business Managed Systems.
• Identify Security improvements or risk related to internal Business Managed Systems (annual security risks assessment)
• Leading implementation of cyber security controls, ensuring that application security policies and procedures are applied by the asset team
• Collecting KPIs and measuring risk (Key Risk Indicators - KRIs)
• Periodically performing threat modelling, assessment of security risks and reviewing risk treatment plans so that the risk posture of the asset remains within an acceptable level
• Supporting business continuity and disaster recovery exercise on a regular basis (annual)
• Contributing to annual internal and the various audits
• Implementing actions (and security controls) in relation to non-compliance identified during the audits
• Analyse / contextualise / implement security controls / patches emanating from the PSIRT /VMS
• Provides S/H BOM to PSIRT/VMS Manager
• Manage/Perform periodic vulnerability scans

Knowledge, Skills & Experience

Qualifications

• Degree in Engineering, Computer Science or related discipline

· Postgraduate studies in Systems Engineering (Desirable)

• Cyber Industry qualifications (e.g. CISSP, CISM, CompTIA Security+, or similar)

To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:

• Relevant experience in a similar role supporting or managing security information security procedure implementation for sensitive and classified systems in a project setting and within large organisations (7+ years).
• Demonstrated knowledge and experience of security control requirements within Singapore and the international environment as it relates to project activities including engineering, supply chain practices, security arrangements and IT systems
• Knowledge and experience in ISO 27001 certification process and Singapore security regulations constraints (i.e. CCOP, IM(ICT&SS, and CTM)
• Experience with configuration management and information management for Singapore projects and an understanding of engineering baselines.
• Experience with Safety, Security and Human Factors standards and practices
• Strong influencing and negotiation skills including the ability to withstand pressures at all levels when processes are not being adhered to.
• Demonstrated experience in undertaking or supporting security investigations and audits.
• Sound commercial and regulatory knowledge and experience with the ability to critically interpret legislation and regulations.
• A strategic mindset, good attention to detail and an analytical approach in identifying and solving problems.
• Ability to act independently and prioritise work to align with the project needs.
• Demonstrated communication skills with a proven ability to work as part of a team and establish and maintain relationships with stakeholders at all levels and across the business.

Desirable:

· Experience in System Engineering tools eg. DOORs, Polarian, Jira

· Experience working in an agile environment

General / Special Requirements

· Assist in ensuring a harmonious work environment in all departments that you are working with by upholding Thales' key values.

· An advocate for diversity and inclusion who will be actively involved in implementing change initiatives to achieve our diversity goals

· An advocate for a culture of continuous improvement

· An advocate for Accountability, transparency and curiosity

· Comply with all relevant company Occupational Health, Safety and Environmental policies and framework and work practices with the intent of preventing or minimising accidental exposures to self, colleagues, visitors and/or the environment and to ensure a safe work practises at all times.

· Comply with all relevant Company policies and procedures.

· Occasional international travel may be required

SPECIAL REQUIREMENTS:

· Eligible to obtain Singapore CAT2 Clearance

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.