Cyber Security Governance & Assurance Lead (SVP/VP)

We are partnering with a leading financial services organisation in Singapore to appoint a Cyber Security Governance & Assurance Lead. Reporting directly to the CISO, this is a senior leadership role responsible for driving the organisation's cybersecurity governance, risk and assurance framework. You will lead a team of Security GRC specialists and work closely with senior technology, risk and business stakeholders to strengthen security controls, regulatory compliance and cyber resilience.

Key Responsibilities:

- Lead the development and continuous enhancement of cybersecurity policies, standards, governance frameworks and processes.

- Oversee cybersecurity risk assessments, security deviations, risk acceptance and remediation activities.

- Maintain and enhance the organisation's cybersecurity risk management framework, including tracking of audit findings, security gaps and remediation initiatives.

- Lead and coordinate IT security audits, working closely with internal and external stakeholders to ensure timely resolution of findings.

- Monitor evolving regulatory requirements and ensure continued alignment with relevant cybersecurity regulations and standards.

- Develop and present cybersecurity metrics and KRIs to senior management and risk committees.

- Assess emerging cybersecurity risks and technologies and recommend appropriate controls and solutions.

- Lead, develop and mentor a team of cybersecurity governance, risk and compliance professionals.

What We're Looking For:

- 12+ years of experience across Cyber Security Governance, Technology Risk, Information Security or GRC, ideally within Financial Services, Payments or another highly regulated environment.

- Strong knowledge of cybersecurity governance frameworks, risk management methodologies, regulatory requirements and IT security standards.

- Good understanding of the Singapore regulatory environment, including MAS requirements, Cybersecurity Act, PDPA and Payment Services Act.

- Experience managing cybersecurity audits, regulatory reviews, risk assessments and remediation programmes.

- Sufficient technical depth to engage credibly across areas such as hybrid cloud, secure architecture, CI/CD and DevSecOps.

- Strong stakeholder management skills with the ability to influence senior technology, risk and business stakeholders.

- Proven people leadership experience and the ability to build and develop high-performing teams.

- Certifications such as CISM, CISA, CRISC or CGEIT would be advantageous.

Please send your CV to [Confidential Information] for a confidential discussion.