Our client is seeking an experienced cybersecurity leader to drive enterprise security governance, technology risk and data protection across the organisation. Reporting to the Chief Technology Officer, this role will provide independent oversight of cybersecurity strategy, governance, compliance and security architecture while partnering closely with technology and business leaders.

Key Responsibilities:

Develop and enhance enterprise cybersecurity governance, policies and security standards.
Lead technology risk assessments, security architecture reviews and risk acceptance processes.
Drive data protection and privacy governance, including data classification and regulatory compliance.
Oversee cybersecurity audits, regulatory engagements, certification programmes and remediation activities.
Provide governance over third-party security risk, business continuity and incident management.
Develop executive dashboards and report cyber risk posture to senior management.
Build and lead a high-performing security governance team while fostering strong stakeholder relationships across the organisation.

Requirements:

Degree in Computer Science, Information Security or a related discipline.
12+ years experience in cybersecurity, technology risk or information security governance.
Strong knowledge of ISO 27001, NIST, PCI DSS, PDPA/GDPR and enterprise security governance.
Experience leading security audits, regulatory compliance and technology risk programmes.
Strong communication and stakeholder management skills with the ability to influence senior leadership.

Preferred:

Current or former CISO, Deputy CISO, Head of Information Security, or someone ready to step into a CISO role.
Executive presence with experience presenting cybersecurity strategy and risk matters to Boards and Executive Committees.
Experience engaging with regulators and Board of Directors will be highly advantageous.

To apply:

If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at [HIDDEN TEXT] for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389

Lic: 16S8060

Head of Cyber Governance and Risk