Assistant/ Deputy Director (Digital Infra, Cybersecurity & IT Governance)

National Gallery Singapore is a leading visual arts institution which oversees the world's largest public collection of Singapore and Southeast Asian modern art. Situated at the birthplace of modern Singapore, in the heart of the Civic District, the Gallery is housed in two national monuments - City Hall and former Supreme Court - that have been beautifully restored and transformed into this exciting 64,000 square metre venue. Reflecting Singapore's unique heritage and geographical location, the Gallery aims to be a progressive museum that creates dialogues between the art of Singapore, Southeast Asia and the world to foster and inspire a creative and inclusive society. This is reflected in our collaborative research, education, long-term and special exhibitions, and innovative programming. The Gallery also works with international museums such as Centre Pompidou, Muse d'Orsay, Tate Britain, National Museum of Modern Art, Tokyo (MOMAT) and National Museum of Modern and Contemporary Art, Korea (MMCA), to jointly present Southeast Asian art in the global context, positioning Singapore as a key node in the global visual arts scene.

In 2020, the Gallery was the only museum in Southeast Asia that received a ranking in The Art Newspaper's annual global survey of attendance at art museums, taking 20th place. In 2018, the Gallery was also the first museum in Asia to receive the Children in Museums Award by the European Museum Academy and Hands On! International Association of Children in Museums. It also won the awards for "Best Theme Attraction" at TTG Travel Awards 2017, "Best Attraction Experience", "Breakthrough Contribution to Tourism" and "Best Customer Service (Attractions)" at the prestigious Singapore Tourism Awards in 2016 for its role in adding to the vibrancy of Singapore's tourism landscape.

We offer job opportunities in our dynamic organisation. Working at the Gallery enhances and cultivates your love for the arts, and offers you a chance to be part of the Gallery's vision.

OUR PEOPLE

At National Gallery Singapore, we develop cultural leaders who make the world better. Our people are united by a shared belief in the power and necessity of art, and work together to create meaningful experiences for our visitors.

Lead the secure, resilient and user-centred technology foundation supporting National Gallery Singapore's people, museum operations, visitor services and transformation. The role combines infrastructure and cybersecurity leadership with business judgement, change management and team development.

• Shape infrastructure, cybersecurity and workplace-platform strategy.

• Enable the Gallery's AI, data and digital priorities securely and sustainably.

• Improve service resilience, user experience and readiness for change.

• Develop a strong internal technology team with mature technical and service capabilities.

1. Strategy and Infrastructure Architecture

• Develop the infrastructure, cybersecurity and IT-governance strategy and roadmap.

• Own architecture across networks, Microsoft 365, identity, endpoints, cloud and hybrid services, monitoring, backup and recovery.

• Set standards and lifecycle requirements; assess capacity, obsolescence, dependencies and technical debt.

• Govern technology assets, configurations, licences, support status and secure disposal.

• Prioritise renewal and investment plans; act as design authority for material changes and exceptions.

• Advise management on investment, risk and long-term sustainability.

2. Cybersecurity, Risk and Assurance

• Lead cybersecurity strategy, risk posture and improvement priorities.

• Provide senior stewardship of infrastructure and cybersecurity risk, including treatment plans, management reporting and escalation of material exposures.

• Oversee identity, privileged access, endpoint, network and cloud security, vulnerability management, monitoring, incident readiness and third-party risk.

• Provide independent advice on material risks, incidents, control gaps, exceptions and remediation.

• Maintain risk registers, controls and assurance evidence; lead audits and closure of findings.

• Apply proportionate security and privacy-by-design to platforms, AI, automation and vendor solutions.

• Oversee technology controls supporting data protection in partnership with privacy, data and information-management owners.

• Ensure compliance with applicable government, cybersecurity, privacy, records-management and Gallery requirements.

• Keep IT security policies and procedures current with operations, technology risks and applicable requirements.

• Strengthen cybersecurity awareness through communications, training, exercises and lessons from incidents.

3. Service Resilience and User Experience

• Own availability, sustained performance and recovery readiness of foundational services.

• Set service ownership, service levels, monitoring, escalation and reporting.

• Lead incident, problem, change, capacity, configuration, asset, backup and continuity practices.

• Maintain and test disaster-recovery and technology-continuity arrangements with business and system owners.

• Direct major-incident response, recovery, review and remediation.

• Use service data and user feedback to improve reliability, usability, support and adoption.

4. Business, AI and Cross-Team Enablement

• Ensure infrastructure, identity and cybersecurity capabilities support organisational, digital and AI priorities.

• Work with Digital Delivery, Data Analytics and business teams to identify architecture, security, resilience and operating requirements early.

• Ensure application, data and AI services are supportable, monitored, recoverable and sustainably operated.

• Translate technical choices into clear business implications and recommendations.

• Establish practical technology guardrails for responsible adoption of AI, automation, low-code, cloud and data capabilities.

5. People, Investment and Partnerships

• Lead and mentor the IT Infrastructure, Cybersecurity & IT Governance team.

• Develop service ownership, business engagement, change leadership, risk communication and vendor-management capability alongside technical depth.

• Set clear accountabilities, standards, succession and development plans.

• Manage budgets, lifecycle investments and sourcing for infrastructure, Microsoft 365, connectivity, cloud and cybersecurity.

• Drive provider accountability for service quality, cybersecurity, business value, resilience and continuous improvement.

• Assess third-party security, continuity, concentration, lock-in and exit risks across critical providers.

• Senior leadership experience across enterprise infrastructure, cybersecurity, workplace technology or technology operations.
• Accountability for business-critical services, operational resilience, incident management, service recovery and technology-related risks.
• Experience converting strategy into funded roadmaps, procurements and measurable improvements.
• Leadership of technical teams and managed-service providers to deliver reliable services.
• Ability to advise senior stakeholders and align technology decisions with business needs and user outcomes.
• Proven ability to develop technical managers and lead technology-enabled business and organisational change.
• Cybersecurity governance, Zero Trust, technology risk and assurance, and audit or compliance remediation.
• Infrastructure modernisation, cloud or technology migration, procurement and service transformation.
• Exposure to AI, automation, low-code solutions, data platforms, digital user experience or technology-enabled organisational change.
• Experience in the public sector, cultural or museum sector, or another visitor- and service-oriented environment.
• A relevant degree or equivalent professional experience. Certifications such as CISSP, CISM, CRISC, Microsoft, TOGAF or ITIL are advantageous.