Group Chief Information Security Officer (CISO)

Kerry Consulting; Singapore; On-site; SGD 200,000 - 300,000; Full time

Job summary

A leading consulting firm in Singapore is seeking a Group Chief Information Security Officer (CISO) to define and lead the information security strategy. The ideal candidate will have 12-15 years of experience in information security, including 5+ years in a senior leadership role. Responsibilities include managing security operations, advising senior management, and building a cybersecurity team. The role also involves establishing governance structures and ensuring compliance with laws and regulations. This position offers a competitive compensation package and a strategic leadership role in cybersecurity.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Computer Science, or a related discipline.
• Recognized security certifications such as CISSP, CISM, or equivalent.
• At least 12-15 years of experience in information security, with 5+ years in a senior leadership capacity.
• Strong understanding of security governance, operations, risk management, and compliance.
• Proven ability to communicate and influence effectively at the senior management and board levels.

Responsibilities

• Develop and drive the information security vision and strategy.
• Act as a trusted advisor on cybersecurity risks.
• Manage day-to-day security operations including incident response.
• Build and lead a capable in-house cybersecurity team.
• Drive organization-wide security awareness programs.

Skills

Security governance

Cybersecurity risk management

Incident response

Security operations

Education

Bachelor’s or Master’s degree in Information Security or related

Tools

Cybersecurity tools

Job description

The Group Chief Information Security Officer (CISO) is responsible for defining and leading the enterprise-wide information security strategy to protect the organization's systems, data, and digital assets. As a key member of the leadership team, the CISO will oversee the development and implementation of security frameworks, policies, and operational controls, ensuring the business is resilient to current and emerging cyber threats.

Key Responsibilities

Strategy & Leadership

• Develop and drive the organization’s information security vision, strategy, and roadmap aligned with business objectives.
• Act as a trusted advisor to senior management and the board on cybersecurity risks and resilience.
• Lead cross‑functional efforts to embed security into business operations and technology initiatives.

Governance, Risk & Compliance

• Establish and maintain cybersecurity governance structures, policies, and standards.
• Ensure compliance with relevant laws, regulations, and industry standards.
• Oversee enterprise risk management processes related to information security, including third‑party/vendor risk.

Security Operations & Incident Response

• Manage day‑to‑day security operations including threat detection, incident response, and vulnerability management.
• Lead investigations into security incidents and coordinate containment, remediation, and root cause analysis.
• Continuously improve the organization’s incident response capability and playbooks.

Technology & Architecture

• Partner with IT and digital teams to ensure security is built into systems, platforms, and applications.
• Evaluate and implement cybersecurity tools and services to enhance the organization’s defense capabilities.
• Provide oversight on the secure adoption of new technologies, including cloud, mobile, and remote access.

Team Leadership & Development

• Build, mentor, and lead a capable in‑house cybersecurity team.
• Define team structure, roles, and career development plans.
• Promote a culture of accountability, collaboration, and continuous improvement.

Awareness & Engagement

• Drive organization‑wide security awareness and training programs.
• Engage business and functional leaders to ensure security considerations are integrated into decision‑making.
• Foster a risk‑aware culture across all levels of the organization.

Requirements

• Bachelor’s or Master’s degree in Information Security, Computer Science, or a related discipline.
• Recognized security certifications such as CISSP, CISM, or equivalent.
• At least 12‑15 years of experience in information security, with 5+ years in a senior leadership capacity.
• Strong understanding of security governance, operations, risk management, and compliance.
• Proven ability to communicate and influence effectively at the senior management and board levels.

To Apply

If you’re interested to apply or find out more, please share your CV or reach out to Chen Yi at [e-mail] for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389

Lic: 16S8060