Cyber Security Head / Lead – Governance, Risk and Compliance (GRC)

Charterhouse Asia; Singapore; On-site; SGD 120,000 - 150,000; Full time

Job summary

A leading company is seeking a Cyber Security Head to lead their Cyber Security Pillar. The role involves formulating cybersecurity policies, managing audits, mentoring teams, and fostering a security-centric culture. Ideal candidates will have extensive experience in risk management and information security, along with relevant degrees and certifications. Join to shape the cybersecurity landscape and ensure compliance across networks.

Qualifications

• Minimum of seven years’ experience in risk management and information security.
• In-depth knowledge of ISO/IEC 27001 and NIST frameworks.

Responsibilities

• Formulate and enforce cybersecurity policies and standards.
• Lead audit processes and resolve compliance issues.
• Drive cybersecurity awareness initiatives.

Skills

Leadership

Risk Management

Information Security

Cybersecurity Awareness

Education

Degree in Computer Science

Degree in Information Systems

Degree in Engineering

Job description

Job description

For this role, you will be heading the Cyber Security Pillar.

Position Overview:

1. Formulate and enforce cybersecurity policies, standards, and protocols for project networks, ensuring thorough compliance.
2. Lead and manage audit processes, reviewing findings and crafting holistic action plans to resolve compliance issues.
3. Guide and mentor Cybersecurity Leads in business units, ensuring consistent compliance across project networks.
4. Cultivate a cybersecurity-centric mindset throughout the organization, embedding security practices into daily routines.
5. Collaborate with Group GISO and Group IT to guarantee seamless security oversight and compliance across secure networks.
6. Work alongside the Group GISO to monitor, report, and address vulnerabilities and cybersecurity risks, keeping leadership informed.
7. Drive ongoing cybersecurity awareness initiatives, fostering knowledge and the adoption of critical security practices among employees.
8. Design and oversee a comprehensive Cybersecurity Incident Management system to effectively handle incidents.

Qualifications & Experience:

1. A degree in Computer Science, Information Systems, Engineering, or a related IT field.
2. Preferred certifications like CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager).
3. Minimum of seven years’ experience in risk management and information security.
4. In-depth knowledge of information security management frameworks, including ISO/IEC 27001 and NIST.
5. Strong expertise in IT systems, architecture, and data governance.
6. Advanced understanding of cybersecurity threats and the evolving landscape of risks.
7. Proven leadership skills with a strong ability to manage and inspire teams.

Please contact Sheralynn Tjioe at [e-mail] for a confidential discussion.

EA License no: 16S8066 | Reg no.: R1878306

Only successful candidates will be notified.