Director, Cybersecurity Policy, Risk & Compliance

Careerally Pte Ltd; Singapore; On-site; SGD 125,000 - 150,000; Full time

Job summary

A leading technology company in Singapore is searching for a Strategic Cybersecurity and Risk Leader. You will shape enterprise-wide cybersecurity policies and governance frameworks, lead a high-performing team, and engage with senior stakeholders. Candidates should have over 15 years of experience and familiarity with cybersecurity governance standards. This permanent position offers a competitive salary and comprehensive benefits package.

Benefits

Comprehensive benefits package

Performance-based bonus

Qualifications

• Min 15 years of experience in cybersecurity, risk and compliance.
• Deep familiarity with IM8, NIST CSF, COBIT, ISO27001, or equivalent frameworks.
• Recognized certifications such as CISSP, CISA, CRISC, CGEIT, or equivalent.

Responsibilities

• Lead the development and lifecycle management of cybersecurity policies.
• Engage with senior-level stakeholders to align policies with operational realities.
• Oversee control design and compliance tracking.

Skills

Cybersecurity governance

Policy implementation

Regulatory engagement

Stakeholder management

Leadership

Job description

Key Highlights

• Permanent Position
• Opportunity to work with a dynamic, industry-leading company
• Up to $19,000 + Bonus + comprehensive Benefits package

We are hiring a strategic cybersecurity and risk leader to shape and implement enterprise-wide policies and governance frameworks for a critical public sector environment in Singapore.

This is a leadership opportunity that involves designing and operationalizing cybersecurity and technology risk standards across a large-scale regulated ecosystem. You'll lead a team in delivering control design, policy adherence, and stakeholder engagement to elevate sector-wide cybersecurity maturity.

The ideal candidate brings deep experience in cybersecurity governance, policy implementation, and regulatory engagement, particularly within complex or regulated environments.

Responsibilities

• Lead the development and lifecycle management of cybersecurity and technology risk policies, standards, and control libraries across a multi-entity public sector ecosystem.
• Engage with senior-level stakeholders to contextualize and align policies with operational realities.
• Oversee control design and attestation processes, ensuring robust compliance tracking and deviation management.
• Drive policy awareness and risk culture initiatives through education campaigns, self-assessment programs, and governance innovation.
• Analyze evolving risks and proactively update frameworks to reflect new technologies, threats, and regulatory shifts.
• Build strong relationships across CIO, CISO, and governance functions in both central and decentralized environments.
• Lead and manage a high-performing team of governance professionals.

Requirements

• Min 15 years of experience in cybersecurity, risk and compliance within large enterprises or public sector environments.
• Deep familiarity with IM8, NIST CSF, COBIT, ISO27001, or equivalent frameworks.
• Proven ability to translate policy into actionable control programs across diverse stakeholder groups.
• Strong domain knowledge in cybersecurity governance, technology risk, and regulatory alignment.
• Recognized certifications such as CISSP, CISA, CRISC, CGEIT, or equivalent.
• Exceptional leadership and stakeholder management skills, comfortable with influencing across matrixed, senior-level environments.

Interested applicants, please submit updated resume in MS format via the Apply button.

Position and remuneration will be commensurate with skills and experience. We regret that only short-listed candidates will be contacted.

Careerally Pte Ltd | EA Licence: 24C2215
EA Registration No: R1874897