Group Chief Information Security Officer (CISO / Global role) [EL]

WECRUIT PTE. LTD.; Singapore; On-site; SGD 240,000 - 400,000; Full time

Job summary

Wecruit Pte Ltd is seeking a senior cybersecurity leader to own the group security strategy and multi-year transformation across markets. You will establish a consistent governance framework and drive risk-based decisions for regional coordination and escalation.

The role demands expertise in security architecture, cloud and data protection, plus proven incident response leadership and executive communication with cross-functional teams.

Qualifications

• 12+ years of cybersecurity experience with substantial leadership responsibility.
• Experience managing cybersecurity functions across multiple countries, regions or business entities.
• Strong technical expertise across security architecture, cloud, network, identity, endpoint, vulnerability and security operations.
• Proven track record in cybersecurity transformation and security operating-model development.
• Strong experience managing significant cybersecurity incidents and coordinating cross-functional response teams.
• Experience working within matrix organisations and influencing stakeholders across different business units.
• Practical understanding of international cybersecurity, privacy and data-protection requirements.
• Experience with operational technology, industrial systems or business-critical technology environments is advantageous.
• Strong executive communication and stakeholder-management capabilities.
• Industry experience in logistics, freight forwarding, shipping, aviation, ports, rail or manufacturing is advantageous.
• Professional cybersecurity certifications such as CISSP, CISM, CCISO, GIAC, OSCP or relevant cloud-security certifications are advantageous.

Responsibilities

• Own the Group's cybersecurity strategy, governance model and multi-year transformation roadmap across multiple markets.
• Establish a consistent cybersecurity operating framework covering governance, accountability, regional coordination, escalation and risk acceptance.
• Define the target security architecture across network, cloud, endpoint, identity, workload, email, web and data-security environments.
• Drive security-by-design across technology transformation, cloud migration, platform implementation and major system integration projects.
• Lead enterprise vulnerability, exposure and attack-surface management, ensuring risk-based prioritisation and timely remediation.
• Oversee security operations and engineering capabilities, including SIEM, EDR, detection engineering, threat hunting, threat intelligence and managed SOC services.
• Build and maintain a coordinated Cybersecurity Incident Response capability across the Group and lead response to significant cyber incidents when required.
• Strengthen cyber resilience through backup protection, recovery testing, business continuity and operational fallback planning.
• Provide cybersecurity leadership for logistics and operational technology environments, including warehouse automation, robotics, fleet technology and customer/carrier integrations.
• Drive strategic programmes across identity security, privileged access, cloud security, encryption, data protection, phishing resistance and secure AI adoption.
• Maintain cybersecurity policies and control standards aligned with recognised industry frameworks.
• Monitor applicable regulatory and data-protection requirements and translate them into practical security controls across relevant markets.
• Lead third-party security assessments, customer security reviews, cyber-insurance requirements and cybersecurity due diligence for corporate transactions.
• Build a high-performing cybersecurity function, manage external security partners and provide clear cyber-risk reporting to senior leadership and governance committees.

Skills

Leadership

Cybersecurity strategy

Security architecture

Cloud security

Governance & risk

Incident response

Security operations

Stakeholder management

Matrix organisations

Executive communication

Tools

CISSP

CISM

GIAC

Job description

Key Responsibilities

• Own the Group's cybersecurity strategy, governance model and multi-year transformation roadmap across multiple markets.
• Establish a consistent cybersecurity operating framework covering governance, accountability, regional coordination, escalation and risk acceptance.
• Define the target security architecture across network, cloud, endpoint, identity, workload, email, web and data-security environments.
• Drive security-by-design across technology transformation, cloud migration, platform implementation and major system integration projects.
• Lead enterprise vulnerability, exposure and attack-surface management, ensuring risk-based prioritisation and timely remediation.
• Oversee security operations and engineering capabilities, including SIEM, EDR, detection engineering, threat hunting, threat intelligence and managed SOC services.
• Build and maintain a coordinated Cybersecurity Incident Response capability across the Group and lead response to significant cyber incidents when required.
• Strengthen cyber resilience through backup protection, recovery testing, business continuity and operational fallback planning.
• Provide cybersecurity leadership for logistics and operational technology environments, including warehouse automation, robotics, fleet technology and customer/carrier integrations.
• Drive strategic programmes across identity security, privileged access, cloud security, encryption, data protection, phishing resistance and secure AI adoption.
• Maintain cybersecurity policies and control standards aligned with recognised industry frameworks.
• Monitor applicable regulatory and data-protection requirements and translate them into practical security controls across relevant markets.
• Lead third-party security assessments, customer security reviews, cyber-insurance requirements and cybersecurity due diligence for corporate transactions.
• Build a high-performing cybersecurity function, manage external security partners and provide clear cyber-risk reporting to senior leadership and governance committees.

Requirements

• 12+ years of cybersecurity experience with substantial leadership responsibility.
• Experience managing cybersecurity functions across multiple countries, regions or business entities.
• Strong technical expertise across security architecture, cloud, network, identity, endpoint, vulnerability and security operations.
• Proven track record in cybersecurity transformation and security operating-model development.
• Strong experience managing significant cybersecurity incidents and coordinating cross-functional response teams.
• Experience working within matrix organisations and influencing stakeholders across different business units.
• Practical understanding of international cybersecurity, privacy and data-protection requirements.
• Experience with operational technology, industrial systems or business-critical technology environments is advantageous.
• Strong executive communication and stakeholder-management capabilities.
• Industry experience in logistics, freight forwarding, shipping, aviation, ports, rail or manufacturing is advantageous.
• Professional cybersecurity certifications such as CISSP, CISM, CCISO, GIAC, OSCP or relevant cloud-security certifications are advantageous.

Wecruit Pte Ltd

EA License No. 20C0270