Cyber Security Head/Lead – Governance, Risk and Compliance (GRC)

Charterhouse Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

An established industry player is seeking a Cyber Security Head to lead their Governance, Risk, and Compliance initiatives. This pivotal role involves formulating and enforcing cybersecurity policies, managing audits, and fostering a security-centric culture throughout the organization. The ideal candidate will possess extensive experience in risk management, a strong grasp of cybersecurity frameworks, and proven leadership abilities. Join a forward-thinking company where your expertise will drive security practices and compliance across all project networks, ensuring a robust cybersecurity posture in a rapidly evolving landscape.

Qualifications

• 7+ years in risk management and information security.
• Strong expertise in IT systems and data governance.

Responsibilities

• Lead cybersecurity policy formulation and compliance enforcement.
• Manage audit processes and mentor cybersecurity teams.

Skills

Cybersecurity Policy Development

Risk Management

Compliance Auditing

Incident Management

Team Leadership

Education

Degree in Computer Science

CISSP Certification

CISM Certification

Tools

ISO/IEC 27001

NIST Framework

Job description

Cyber Security Head/Lead Governance, Risk and Compliance (GRC)

Job Posting by Sheralynn Tjioe, Associate Director (Cyber Security and GRC) Recruitment at Charterhouse Asia

[HIDDEN TEXT]

For this role, you will be heading the Cyber Security Pillar.

Position Overview:

1. Formulate and enforce cybersecurity policies, standards, and protocols for project networks, ensuring thorough compliance.
2. Lead and manage audit processes, reviewing findings and crafting holistic action plans to resolve compliance issues.
3. Guide and mentor Cybersecurity Leads in business units, ensuring consistent compliance across project networks.
4. Cultivate a cybersecurity-centric mindset throughout the organization, embedding security practices into daily routines.
5. Collaborate with Group GISO and Group IT to guarantee seamless security oversight and compliance across secure networks.
6. Work alongside the Group GISO to monitor, report, and address vulnerabilities and cybersecurity risks, keeping leadership informed.
7. Drive ongoing cybersecurity awareness initiatives, fostering knowledge and the adoption of critical security practices among employees.
8. Design and oversee a comprehensive Cybersecurity Incident Management system to effectively handle incidents.

Qualifications & Experience:

1. A degree in Computer Science, Information Systems, Engineering, or a related IT field.
2. Preferred certifications like CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager).
3. Minimum of seven years experience in risk management and information security.
4. In-depth knowledge of information security management frameworks, including ISO/IEC 27001 and NIST.
5. Strong expertise in IT systems, architecture, and data governance.
6. Advanced understanding of cybersecurity threats and the evolving landscape of risks.
7. Proven leadership skills with a strong ability to manage and inspire teams.

Please contact Sheralynn Tjioe at [HIDDEN TEXT] for a confidential discussion.

EA License no: 16S8066 | Reg no.: R1878306

Only successful candidates will be notified.