Cyber Security Governance & Assurance Lead (SVP/VP)

Charterhouse Partnership; Singapore; Presencial; SGD 180 000 - 260 000; Tempo integral

Resumo da oferta

Charterhouse Partnership, partnering with a leading financial services organisation in Singapore, seeks a senior Cyber Security Governance & Assurance Lead reporting to the CISO. You will guide the governance, risk and assurance framework and lead a team of GRC professionals to strengthen controls and cyber resilience.

You will engage with senior stakeholders across technology, risk and business units to drive regulatory compliance, audits, and continuous improvement of security posture in a

Qualificações

• Extensive experience building and leading a GRC program in financial services.
• Strong knowledge of MAS requirements, Cybersecurity Act, PDPA and Payment Services Act.
• Experience managing cybersecurity audits, regulatory reviews and remediation.

Responsabilidades

• Lead development and continual enhancement of cybersecurity policies and governance.
• Oversee risk assessments, deviations, risk acceptance and remediation activities.
• Maintain and evolve the cybersecurity risk management framework and audit tracking.
• Lead IT security audits and coordinate with internal/external stakeholders.
• Monitor regulatory developments and ensure alignment with standards.
• Develop metrics and KRIs for senior management and risk committees.
• Mentor and develop a high-performing GRC team.

Conhecimentos

Cybersecurity governance

Risk management

Stakeholder management

Leadership

Regulatory compliance

Audits & assurance

CI/CD & DevSecOps

Security architecture

CISM

CISA

CRISC

CGEIT

Formação académica

Bachelor's degree in Information Security / Computer Science

Descrição da oferta de emprego

We are partnering with a leading financial services organisation in Singapore to appoint a Cyber Security Governance & Assurance Lead. Reporting directly to the CISO, this is a senior leadership role responsible for driving the organisation’s cybersecurity governance, risk and assurance framework. You will lead a team of Security GRC specialists and work closely with senior technology, risk and business stakeholders to strengthen security controls, regulatory compliance and cyber resilience.

Key Responsibilities

• Lead the development and continuous enhancement of cybersecurity policies, standards, governance frameworks and processes.
• Oversee cybersecurity risk assessments, security deviations, risk acceptance and remediation activities.
• Maintain and enhance the organisation’s cybersecurity risk management framework, including tracking of audit findings, security gaps and remediation initiatives.
• Lead and coordinate IT security audits, working closely with internal and external stakeholders to ensure timely resolution of findings.
• Monitor evolving regulatory requirements and ensure continued alignment with relevant cybersecurity regulations and standards.
• Develop and present cybersecurity metrics and KRIs to senior management and risk committees.
• Assess emerging cybersecurity risks and technologies and recommend appropriate controls and solutions.
• Lead, develop and mentor a team of cybersecurity governance, risk and compliance professionals.

What We’re Looking For

• 12+ years of experience across Cyber Security Governance, Technology Risk, Information Security or GRC, ideally within Financial Services, Payments or another highly regulated environment.
• Strong knowledge of cybersecurity governance frameworks, risk management methodologies, regulatory requirements and IT security standards.
• Good understanding of the Singapore regulatory environment, including MAS requirements, Cybersecurity Act, PDPA and Payment Services Act.
• Experience managing cybersecurity audits, regulatory reviews, risk assessments and remediation programmes.
• Sufficient technical depth to engage credibly across areas such as hybrid cloud, secure architecture, CI/CD and DevSecOps.
• Strong stakeholder management skills with the ability to influence senior technology, risk and business stakeholders.
• Proven people leadership experience and the ability to build and develop high-performing teams.
• Certifications such as CISM, CISA, CRISC or CGEIT would be advantageous.