#WorkinginCSA: Safeguarding Singapore’s Critical Infrastructure Through Cybersecurity Regulation

1. Tell us more about your team’s work and your role as an Assistant Director in Regulations Division.

With Regulation Division Colleagues.

My role in Regulations Division (RD) focuses on safeguarding Singapore’s CII through cybersecurity regulatory. This involves overseeing the statutory obligations of CII owners under the Cybersecurity Act, as well as reviewing cybersecurity audit and risk assessment reports to ensure critical systems are adequately protected. 

Prior to joining RD, I was with CSA's National Cyber Threat Analysis Centre (TAC), where I conducted research and in-depth analysis of cyber threats and risks, delivering strategic insights to guide stakeholder decisions and shape national cyber policy. 

2. What inspired you to become interested to pursue a career in this field?

My journey into cybersecurity was anything but conventional. With a background in chemistry, I began my career in the science and technology sector at another Government agency before making a deliberate pivot into cybersecurity shortly before the COVID-19 pandemic. What drew me to the field was a growing recognition that cybersecurity had become a cornerstone of national resilience and public trust.

The pandemic, in many ways, reaffirmed my decision. As the world rapidly shifted online, the cyber threat landscape evolved, attack surfaces expanded overnight, and the criticality of cyber vulnerabilities became impossible to ignore.

3. What are some projects you’ve worked on in CSA that you found particularly interesting or challenging? 

SICW 2026 Secretariat Team

Three workstreams stood out: 

First, was the Singapore Cyber Landscape publication, one of my first major projects after joining CSA. It required me to quickly grasp cybersecurity concepts, manage external vendors, and keep stakeholders aligned, all while navigating the unprecedented disruptions brought about by the COVID-19 pandemic. Challenging as it was, the experience taught me valuable lessons in adaptability, resilience and stakeholder management.

Second, was the development of an e-learning module on the Cybersecurity Act. Legislation can be a dry topic, and translating dense legal concepts into something interactive and accessible was no easy feat.  However, I found the process particularly rewarding, especially when I saw officers engaging meaningfully with the module. 

Third, is being part of the Secretariat Team for Singapore International Cyber Week 2026, one of the biggest cybersecurity events, covering everything from strategic planning and inter-agency coordination to end-to-end operational execution. More than the work itself, what stood out was the team spirit. Everyone chipped in and looked out for one another, and that kind of teamwork made all the difference in pulling off something of this scale. 

4. Tell us something about your job that not many people know about. 

People often associate cybersecurity with stopping and catching hackers or putting out fires when things go wrong.

In my role, I work closely with critical information infrastructure owners to ensure their systems stay safe and running smoothly, way before anything goes wrong. Much of what I do happens quietly in the background: fixing gaps that most people never notice and making sure the foundations are solid, so we’re never left scrambling when the storm hits.

The best part of the job? When nothing goes wrong.

Because sometimes, the greatest measure of success is knowing that the careful planning, preventive measures and work behind the scenes have helped keep our critical systems secure and running smoothly. 

5. Outside of work, do you have any hobbies and interests? How do you unwind from work? 

Unwinding with CSA colleagues over tennis, with special guest (CE/CSA Gwenda) in attendance.

Those who know me will say that I enjoy sports, particularly football (Liverpool fan, if you were wondering) and tennis. A knee injury last year and the ensuing surgery put a stop to my footballing days, though I recently made my return to the tennis court. 

At the risk of sounding cliché, I believe important lessons can be drawn from sports and applied to cybersecurity — and I am not talking about the “cyber is a team sport” spiel 😊. In sports, recovery is not only about getting back into action. It is just as important to rebuild strength and regain the confidence to bounce back. The same can be said for cybersecurity — or any setting, for that matter. Surviving a breach or setback is only part of the battle; true victory lies in returning stronger.