Cybersecurity Governance, Risk & Compliance Lead

DBS Bank Ltd; Singapore; On-site; SGD 200,000 - 260,000; Full time

Job summary

DBS Bank Ltd is seeking a senior cybersecurity governance, risk and compliance professional to lead regulatory compliance, awareness and data protection across the bank. The role covers developing standards, reporting to risk committees, and driving remediation across major systems.

You will design and implement metrics, oversee data loss prevention, and coordinate with global teams to align with Cybersecurity Act and local regulations.

Qualifications

• 15+ years of information security experience in financial or technology environments.
• Experience implementing security metrics programs (vulnerabilities, findings, alerts).
• Knowledge of ISO27000, NIST SP 800-53 and Cybersecurity Act.
• Strong risk management and assessment capabilities.
• Hands-on experience with security data management and visualization.

Responsibilities

• Develop and maintain security metrics and dashboards for senior management and the Board.
• Drive data loss prevention and protect bank data across channels.
• Lead phishing exercises and cybersecurity awareness campaigns.
• Oversee data analytics and machine learning to prioritize security events.
• Coordinate with regional teams to monitor new cybersecurity regulations.
• Engage external auditors for audits under SOC2, Cyber Trust Mark and related standards.

Skills

Cybersecurity governance

Regulatory compliance

Data protection

Security metrics

Data analytics

Machine learning

Tools

IDS/IPS

Log analysis

Forensics

VPN

Security monitoring

Job description

DBS Bank Ltd is seeking a senior cybersecurity governance, risk and compliance professional to lead regulatory compliance, awareness and data protection across the bank. The role covers developing standards, reporting to risk committees, and driving remediation across major systems.

You will design and implement metrics, oversee data loss prevention, and coordinate with global teams to align with Cybersecurity Act and local regulations.