Cybersecurity and Technology Risk Manager, Global MNC

Kerry Consulting; Singapore; On-site; SGD 150,000 - 220,000; Full time

Job summary

Kerry Consulting is seeking an experienced Cybersecurity & Technology Risk Manager to lead the organisation’s security, technology risk and resilience strategy across enterprise technology, digital platforms and third-party environments.

The role combines strategy, governance and hands-on oversight, working with Technology and business stakeholders to strengthen cyber resilience and enable secure digital innovation. This is an individual contributor role.

Qualifications

• Bachelor’s degree in information security, computer science, engineering or a related discipline.
• Approximately 6–12 years of experience across cybersecurity, technology risk or information security.
• Broad understanding of security operations, cloud security, technology risk and incident response.

Responsibilities

• Develop and lead cybersecurity and technology risk strategy in line with business priorities.
• Establish and enhance security policies, frameworks and controls (NIST, ISO 27001, CIS).
• Oversee security operations across SIEM/SOC, threat detection, vulnerability management and cloud security.
• Manage technology and cyber risk assessments, remediation programmes and assurance activities.
• Ensure compliance with regulatory and data protection requirements incl. PDPA and PCI DSS.
• Lead cyber incident response, crisis management, business continuity and disaster recovery readiness.
• Maintain third‑party cybersecurity risk management, including due diligence and monitoring.
• Strengthen security across cloud, SaaS, APIs, and end-user environments.
• Drive security‑by‑design, DevSecOps practices across initiatives.
• Define security KRIs/KPIs and report risk posture to senior management.
• Leverage automation and AI for security operations and assurance.
• Collaborate with regional/global teams and local stakeholders on standards.

Skills

Stakeholder management

Communication

Security operations

Cloud security

Incident response

Risk management

Security governance

Education

Bachelor’s degree in Information Security, CS, Eng or related

Job description

We are looking for an experienced Cybersecurity & Technology Risk Manager to lead the organisation's security, technology risk and resilience agenda across enterprise technology, digital platforms and third-party environments. This is a broad security lead role combining strategy, governance and hands‑on oversight. The successful candidate will work closely with Technology and business stakeholders to strengthen cyber resilience, manage technology risks and enable secure digital innovation. This is an individual contributor role.

Key Responsibilities

• Develop and execute the cybersecurity and technology risk strategy, ensuring alignment with business priorities and broader enterprise security standards.
• Establish and enhance security policies, frameworks and controls aligned with NIST, ISO 27001, CIS and other relevant industry standards.
• Oversee security operations across SIEM/SOC, threat detection and response, vulnerability management, endpoint, network and cloud security.
• Manage technology and cyber risk assessments, remediation programmes and control assurance activities.
• Ensure compliance with relevant regulatory and data protection requirements, including PDPA and PCI DSS.
• Lead cyber incident response, crisis management, business continuity and disaster recovery readiness.
• Establish and maintain third-party cybersecurity risk management, including security assessments, due diligence and ongoing monitoring.
• Strengthen security across cloud, SaaS, APIs, mobile applications, digital platforms and end-user environments.
• Drive security-by-design and DevSecOps practices across technology and application initiatives.
• Define security KRIs, KPIs and control metrics, providing clear reporting on cyber risk and security posture to senior management.
• Leverage automation, AI and continuous control monitoring to improve security operations and assurance.
• Partner with regional/global security teams and local stakeholders to ensure enterprise security standards are appropriately implemented.
• Drive security awareness and promote a strong risk and security culture across the organisation.

Requirements

• Bachelor's degree in Information Security, Computer Science, Engineering or a related discipline.
• Approximately 6-12 years of experience across cybersecurity, technology risk or information security
• Broad understanding of security operations, cloud security, technology risk, incident response, vulnerability management, data protection and third-party risk.
• Experience managing security within complex, customer-facing or operationally intensive environments.
• Good understanding of PDPA, PCI DSS, NIST, ISO 27001 and CIS Controls.
• Experience supporting digital transformation and applying security-by-design principles to applications and technology platforms.
• Ability to translate technical security risks into clear business impact and practical remediation actions.
• Strong stakeholder management and communication skills, with the ability to influence senior Technology and business leaders.
• Certifications such as CISSP, CISM, CRISC, CCSP, ISO 27001 or equivalent would be advantageous.