Cyber Defence & Security Operations Head

Morgan McKinley; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Morgan McKinley in Singapore seeks an accomplished cybersecurity leader to bridge technical operations with senior business priorities. You will oversee cyber defence, manage critical incidents and collaborate with C-suite stakeholders to protect business operations.

Reporting to the CISO, you will drive improvements in threat detection, incident response and security governance while guiding internal analysts and coordinating with SOC/MSSP partners.

Qualifications

• Minimum 10 years of cybersecurity experience across Security Operations, Incident Response, Cyber Defence or Security Engineering.
• Proven ability to engage and influence senior management and executive stakeholders.
• Ability to translate complex security issues into business terms, with risk exposure and operational impact.
• Experience coordinating incidents involving multiple technology and business stakeholders.
• Familiarity with SIEM, EDR, SOAR and threat intelligence platforms.

Responsibilities

• Oversee security operations, threat monitoring, incident investigations and response activities across enterprise environments.
• Lead and coordinate cybersecurity incidents, including investigation, containment, remediation, recovery and post-incident reviews.
• Work with internal security teams and outsourced SOC/MSSP providers to ensure effective monitoring and timely escalation.
• Drive improvements in threat detection, incident response processes, security monitoring and operational resilience.
• Support proactive threat hunting, threat intelligence integration and enhancement of SIEM/EDR and other security technologies.
• Partner with senior business stakeholders to communicate cybersecurity risks, incidents and business impact.

Skills

Security Operations

Incident Response

Executive Stakeholder Engagement

Threat Detection

Security Monitoring

Cloud Security

Security Governance & Risk

Analytical & Problem Solving

Tools

SIEM

EDR

SOAR

Threat Intelligence Platforms

Job description

This role offers an opportunity for a cybersecurity professional who combines strong technical expertise in security operations and incident response with the ability to engage and influence senior business leaders.

Working closely with the CISO, you will oversee cyber defence operations, lead critical incident response activities and collaborate with senior executives, including C-suite stakeholders and Business Unit Heads, to manage cybersecurity risks and protect business operations.

We are seeking someone who can bridge the gap between technical cybersecurity operations and business priorities, translating complex security threats into clear, actionable insights for senior management.

Key Responsibilities

Cyber Defence & Incident Management

• Oversee security operations, threat monitoring, incident investigations and response activities across enterprise environments.

• Lead and coordinate cybersecurity incidents, including investigation, containment, remediation, recovery and post-incident reviews.

• Work closely with internal security teams and outsourced SOC/MSSP providers to ensure effective monitoring and timely incident escalation.

• Drive improvements in threat detection, incident response processes, security monitoring and operational resilience.

• Support proactive threat hunting, threat intelligence integration and the enhancement of SIEM, EDR and other security technologies.

Executive Stakeholder Engagement & Cyber Risk Advisory

• Partner with senior business stakeholders, including the CEO, CRO, CFO and Business Unit Heads, to communicate cybersecurity risks, incidents and business impact.

• Act as a trusted cybersecurity advisor, providing practical recommendations to strengthen security while supporting business objectives.

• Translate technical security findings into clear, concise management updates and actionable risk mitigation plans.

• Coordinate cross-functional responses during major cybersecurity incidents, ensuring alignment between technology teams, business stakeholders and senior management.

• Present cybersecurity updates, incident trends and security performance metrics to senior leadership.

• Collaborate with business and technology stakeholders to balance security requirements, operational priorities and business continuity.

Security Operations Improvement & Leadership

• Guide and develop internal security analysts while managing the performance of external SOC providers.

• Identify opportunities to improve detection capabilities, incident response readiness and security automation.

• Work closely with Infrastructure, Cloud, Application and Technology teams to strengthen security controls across the enterprise.

• Develop and enhance security playbooks, escalation procedures, incident response frameworks and operational processes.
• Support cybersecurity governance, risk management and compliance initiatives in collaboration with relevant stakeholders.

Requirements:

• Minimum 10 years of relevant cybersecurity experience, preferably across Security Operations, Incident Response, Cyber Defence or Security Engineering.

• Strong hands-on understanding of cybersecurity incidents, threat detection, security monitoring and incident response processes.

• Proven experience engaging and influencing senior management, business leaders or executive stakeholders.

• Ability to communicate complex cybersecurity issues in business terms, including risk exposure, operational impact and remediation priorities.

• Experience coordinating cybersecurity incidents involving multiple technology and business stakeholders.

• Familiarity with security technologies such as SIEM, EDR, SOAR and threat intelligence platforms.

• Experience working with internal security teams, external SOC providers or MSSPs.

• Experience managing or mentoring cybersecurity teams.

• Good understanding of enterprise infrastructure, network security and cloud environments.

• Strong analytical, problem-solving, communication and stakeholder management skills.

• Ability to work independently, exercise sound judgement and remain composed during critical incidents.

Advantageous Experience

• Previous experience as a Cyber Defence Lead, Security Operations Manager, Incident Response Lead or Senior Security Consultant.

• Experience presenting cybersecurity risks or incident updates to C-suite executives or senior management.

• Familiarity with MITRE ATT&CK, threat hunting, detection engineering and security automation.

• Certifications such as CISSP, CISM, GCIH, GCFA, CySA+ or equivalent.

Pam Lim

Morgan Mckinley Pte Ltd

EA Licence No: 11C5502 | EAP Registration No: R1106192