Director – Global Cybersecurity

KLN LOGISTICS MANAGEMENT (ASIA) PTE. LTD.; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

KLN LOGISTICS MANAGEMENT (ASIA) PTE. LTD.

seeks a seasoned cybersecurity leader to define and govern the global–regional operating model, aligning regional security with group standards and regulatory requirements. You will drive security architecture, risk management and incident response across multiple countries, delivering resilient security capabilities for logistics operations while engaging senior stakeholders and Boards.

Qualifications

• Minimum 12 years of cybersecurity experience with leadership across multiple countries or regions.
• Strong hands-on technical knowledge of security architecture, network security, cloud security, IAM, endpoint protection, vulnerability management, SIEM, EDR.
• Experience building or transforming cybersecurity capabilities in a geographically distributed organisation.
• Proven experience leading major cybersecurity incidents end-to-end including regulatory notification.
• Experience operating a distributed Cybersecurity Incident Response Team with cross-functional coordination.
• Ability to lead cybersecurity professionals through a matrix structure and establish common standards.
• Working knowledge of major cybersecurity/data protection regimes including GDPR, PDPA, PDPO, and China laws.
• Experience securing operational technology in critical environments where patching is challenging.
• Strong executive presence and stakeholder-management skills for boards/regulators.

Responsibilities

• Define and implement the global–regional cybersecurity operating model with clear decision rights.
• Develop the Group’s target security architecture and implementation roadmap.
• Establish and enforce global security baselines across critical systems and environments.
• Provide technical security oversight for new platforms, cloud migrations and digital initiatives.
• Lead vulnerability and exposure-management including asset discovery and patching standards.
• Oversee threat detection and security operations, including SIEM/EDR engineering and threat intelligence.
• Establish and lead a Cybersecurity Incident Response Team with a global playbook and follow-the-sun capability.
• Serve as Incident Commander for material cybersecurity incidents and coordinate communications.
• Strengthen cyber resilience with backup standards and recovery testing in major outages.
• Develop security controls for operational technology and logistics systems.
• Lead identity, cloud and data-security initiatives including MFA, PAM, encryption and data loss prevention.
• Maintain Group cybersecurity policies aligned with ISO 27001/NIST and regulatory requirements.

Skills

Security architecture

Network security

Cloud security

Identity and access management

Endpoint protection

Vulnerability management

SIEM

EDR

Incident response

Tools

SIEM

EDR

Job description

Responsibilities:

• Define and implement the global–regional cybersecurity operating model, including decision rights, responsibilities, escalation thresholds and functional coordination across regions and countries.
• Develop the Group’s target security architecture and implementation roadmap covering network segmentation, zero-trust access, endpoint and workload protection, email and web security, cloud security and secrets management.
• Establish and enforce consistent global security-control baselines across critical systems, operating entities and privileged-access environments, with formal exception and risk-acceptance processes.
• Provide technical security oversight for new platforms, system integrations, cloud migrations and digital initiatives, ensuring security requirements are incorporated throughout the technology-delivery lifecycle.
• Lead the Group’s vulnerability and exposure-management programme, including asset discovery, vulnerability scanning, risk-based prioritisation, patching standards and external attack-surface reduction.
• Oversee threat detection and security operations, including SIEM and EDR engineering, detection-rule development, alert triage, threat hunting, threat intelligence and the performance of the managed Security Operations Centre.
• Establish and lead a wide Cybersecurity Incident Response Team with a common playbook, command structure, severity classification, escalation process and follow-the-sun response capability.
• Serve as Incident Commander for material cybersecurity incidents, coordinating containment, recovery, forensic investigation, executive decision-making and regulatory, customer and stakeholder communications.
• Strengthen cyber resilience by establishing immutable and segregated backup standards, testing recovery times for critical platforms and developing manual operational fallbacks for major system outages.
• Develop and implement security controls for operational technology and logistics systems, including warehouse systems, automation equipment, robotics, transport platforms, fleet devices, facility systems and customer or carrier EDI/API integrations.
• Lead identity, cloud and data-security initiatives, including consolidated identity management, phishing-resistant multifactor authentication, privileged-access management, cloud-security posture, encryption, key management, data-loss prevention and secure AI adoption.
• Establish and maintain Group cybersecurity policies and control standards aligned with recognised frameworks such as ISO 27001, NIST Cybersecurity Framework or equivalent, while overseeing security awareness and phishing-resilience programmes.
• Translate global regulatory and cross-border data requirements—including mainland China cybersecurity and data laws, GDPR, Singapore’s Cybersecurity Act and PDPA, and Hong Kong’s PDPO—into practical technical and operational controls.

Requirements:

• Minimum 12 years of cybersecurity experience, including at least five years leading technical security teams across multiple countries or regions.

• Strong hands-on technical knowledge of security architecture, network security, cloud security, identity and access management, endpoint protection, vulnerability management, SIEM, EDR and security engineering.

• Demonstrated experience building or transforming cybersecurity capabilities within a geographically distributed organisation with varying levels of security maturity.

• Proven experience leading major cybersecurity incidents from detection and containment through recovery, executive communication, regulatory notification and post-incident remediation.

• Experience establishing or operating a distributed Cybersecurity Incident Response Team and coordinating internal responders, external forensic specialists, legal advisers and managed-security providers.

• Proven ability to lead cybersecurity professionals through a matrix structure, influence regional and country teams without direct authority, and establish common standards across diverse markets and cultures.

• Working knowledge of at least two major cybersecurity or data-protection regimes, preferably including mainland China’s cybersecurity and data laws, EU GDPR, Singapore’s Cybersecurity Act and PDPA, or Hong Kong’s PDPO.

• Experience securing operational technology, industrial systems or environments where system availability is critical and conventional patching or endpoint controls may not be practical.

• Strong executive presence, communication and stakeholder-management skills, with the ability to explain complex cyber risks and investment decisions clearly to senior management, regulators, customers and Board committees.

• Experience in logistics, freight forwarding, shipping, aviation, ports, rail or manufacturing is strongly preferred; relevant certifications such as CISSP, CISM, CCISO, GIAC, OSCP or cloud-security certifications, would be advantageous.