APAC Information Security Risk Leader

Eames Consulting Group; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

A Financial Institution in APAC seeks an Information Security Risk Manager to lead information security across its Asia Pacific business. This senior, regionally-facing role reports to risk governance forums and offers direct visibility to senior management.

You will own the security strategy, lead a regional team, manage external testing, drive vulnerability management, and coordinate incidents, audits, and data protection across the region.

Qualifications

• Experience leading information security in financial services.
• Regional APAC coverage and senior stakeholder interaction.
• Proven track record managing audits, pen tests and vendors.
• Knowledge of MAS TRM or equivalent regulatory framework.

Responsibilities

• Own the information security strategy and roadmap for APAC.
• Lead and develop a regional information security team.
• Oversee penetration testing and red-team engagements to remediation.
• Mature vulnerability management with automation and metrics.
• Coordinate security incidents through to resolution.
• Advise on security for new cloud initiatives and tech.
• Drive security awareness and risk culture.
• Oversee vendor and third-party risk management.
• Act as regional contact for data protection and breach response.
• Represent security in risk committees and governance forums.

Skills

Security leadership

Team leadership

Stakeholder communication

APAC coverage

Vendor risk management

Penetration testing

Audits

Regulatory frameworks

Tools

MAS TRM knowledge

Job description

A Financial Institution in APAC seeks an Information Security Risk Manager to lead information security across its Asia Pacific business. This senior, regionally-facing role reports to risk governance forums and offers direct visibility to senior management.

You will own the security strategy, lead a regional team, manage external testing, drive vulnerability management, and coordinate incidents, audits, and data protection across the region.