Chief Information Security Officer (CISO)

Morgan McKinley; Singapore; On-site; SGD 300,000 - 550,000; Full time

Job summary

Morgan McKinley is seeking an experienced CISO to lead cybersecurity strategy, architecture, and engineering for a cloud-native tech company in Singapore. The role blends strategic security leadership with deep technical oversight across cloud infrastructure, data, AI platforms and the software development lifecycle.

You will partner with Technology, Engineering, Data and AI leaders to build a scalable, resilient security environment, defining security posture, managing risk, and driving

Qualifications

• 15+ years of cybersecurity experience and leadership in technical security functions.
• Proven track record as CISO/Head of Security Engineering or equivalent.
• Deep expertise across cloud security, architecture, DevSecOps and cyber defence.
• Extensive experience securing AWS, Azure and/or GCP environments.
• Strong knowledge of AI/ML security and Generative AI risks.
• Experience with CNAPP/CSPM, EDR, SIEM, IAM, WAF and container security.

Responsibilities

• Define and execute the technical cybersecurity strategy and roadmap.
• Lead Security Engineering, Cloud Security, Application Security and Threat Management teams.
• Establish security architecture, standards and secure-by-design principles.
• Act as senior security advisor to CTO/CIO and executive leadership.
• Lead security across cloud environments and AI platforms.
• Oversee cloud security posture, vulnerability management, logging and cyber resilience.
• Embed security into cloud transformation, DevSecOps and platform engineering.
• Establish AI security strategy covering Generative AI, AI agents and ML workflows.
• Identify AI-related risks, data leakage and AI supply-chain risk.
• Ensure compliance with regulatory requirements and strengthen cyber resilience.

Skills

Cloud security

Security architecture

DevSecOps

AI security

Threat management

Security operations

Kubernetes security

Security automation

AWS/Azure/GCP

Executive communication

Tools

CNAPP/CSPM

EDR

SIEM

IAM

WAF

API security

container/Kubernetes security

security automation

Job description

We are seeking an experienced CISO to lead the cybersecurity strategy, architecture and engineering agenda for a leading technology company operating in a cloud-native environment with high adoption of AI and emerging technologies.

The role will combine strategic security leadership with deep technical oversight, ensuring security is embedded across cloud infrastructure, applications, data, AI platforms and the software development lifecycle. The successful candidate will work closely with Technology, Engineering, Data and AI leadership to build a scalable, resilient and innovative security environment.

Key Responsibilities

Cybersecurity Strategy & Leadership

• Define and execute the company's technical cybersecurity strategy and roadmap aligned with business and technology objectives.
• Lead and develop high-performing teams across Security Engineering, Cloud Security, Application Security, Security Operations and Threat Management.
• Establish security architecture, engineering standards and secure-by-design principles across the technology environment.
• Act as the senior technical security advisor to the CTO, CIO and executive leadership.
• Lead security strategy across AWS, Azure and/or GCP cloud environments.
• Establish and enhance cloud security architecture, identity and access management, network security, workload protection and data security.
• Oversee cloud security posture management, vulnerability and exposure management, logging, monitoring and cyber resilience.
• Ensure security is embedded into cloud transformation and platform engineering initiatives.
• Establish the organisation's AI Security strategy and framework covering Generative AI, AI agents, machine learning and AI-enabled applications.
• Identify and manage risks including prompt injection, model manipulation, data leakage, model abuse, AI supply-chain risk and insecure AI integrations.
• Embed security controls throughout the AI development and deployment lifecycle.
• Partner with Data Science and AI Engineering teams to implement secure-by-design AI architecture.

Security Engineering & DevSecOps

• Drive DevSecOps and security-by-design practices across software development and engineering teams.
• Integrate security into CI/CD pipelines, infrastructure-as-code and software development lifecycles.
• Oversee application security, API security, container and Kubernetes security, secrets management and software supply-chain security.
• Promote automation to continuously identify and remediate security risks.

Cyber Defence & Threat Management

• Provide technical leadership across Security Operations, Incident Response, Threat Intelligence and Threat Hunting.
• Ensure effective detection, investigation and response capabilities across cloud, endpoint, network and application environments.
• Lead response to major cybersecurity incidents and ensure effective post-incident remediation.
• Develop proactive capabilities to identify emerging threats and reduce the organisation's attack surface.
• Establish appropriate security policies, standards, controls and security metrics.
• Oversee security risk assessments, penetration testing, vulnerability management and third-party security risk.
• Ensure compliance with relevant regulatory and industry requirements.
• Strengthen cyber resilience, disaster recovery and crisis management capabilities.

Requirements:

• 15+ years of cybersecurity experience, with significant experience leading technical security functions.
• Proven experience as a CISO, Deputy CISO, Head of Security Engineering, Head of Cloud Security or equivalent technical security leadership role.
• Strong technical expertise across cloud security, security architecture, application security, DevSecOps and cyber defence.
• Extensive experience securing AWS, Azure and/or GCP environments.
• Strong understanding of AI/ML security and Generative AI risks, with practical experience securing AI platforms or AI-enabled applications highly preferred.
• Experience with modern security technologies including CNAPP/CSPM, EDR, SIEM, IAM, WAF, API security, container/Kubernetes security and security automation.
• Strong understanding of security frameworks such as NIST CSF, CIS Controls, ISO 27001 and MITRE ATT&CK.
• Proven experience leading cybersecurity transformation in a high-growth or technology-driven environment.
• Strong executive communication and stakeholder management skills, with the ability to translate complex technical risks into business outcomes.
• Relevant certifications such as CISSP, CISM, CCSP or GIAC are advantageous.