Group Chief Information Security Officer (CISO / Global role) [EL]

WECRUIT PTE. LTD.; Singapore; On-site; SGD 300,000 - 600,000; Full time

Job summary

WECRUIT PTE. LTD. seeks a senior cybersecurity leader to own the Group's strategy, governance, and multi-year transformation across markets. You will define target architecture and drive security-by-design across major technology programs and integrations.

You will lead threat management, incident response, and cyber resilience, coordinating across regions, systems, and OT environments while reporting to senior leadership.

Qualifications

• 12+ years of cybersecurity experience with leadership responsibility.
• Experience managing cybersecurity functions across multiple countries/regions.
• Strong technical expertise across security architecture, cloud, network, identity, endpoint, vulnerability and SOC.
• Proven track record in cybersecurity transformation and operating-model development.
• Experience leading significant cybersecurity incidents and cross-functional response.
• Experience in matrix organisations and stakeholder influence.
• Practical understanding of international cybersecurity, privacy and data-protection.
• Experience with operational technology/industrial environments is advantageous.
• Industry experience in logistics, freight forwarding, shipping, aviation, ports, rail or manufacturing is advantageous.
• Professional cybersecurity certifications (CISSP, CISM, CCISO, GIAC, OSCP or relevant cloud-security certs) are advantageous.

Responsibilities

• Own the Group's cybersecurity strategy, governance model and multi-year transformation roadmap across markets.
• Establish a consistent cybersecurity operating framework covering governance, accountability, escalation and risk acceptance.
• Define target security architecture across network, cloud, endpoint, identity, workload, email, web and data-security.
• Drive security-by-design across technology transformation, cloud migration and system integration projects.
• Lead vulnerability, exposure and attack-surface management with risk-based prioritisation.
• Oversee security operations and engineering capabilities including SIEM, EDR, detection engineering, threat hunting and managed SOC.
• Build and maintain a coordinated incident response capability and lead major cyber incident response.
• Strengthen cyber resilience through backup protection, testing, continuity and fallback planning.
• Provide cybersecurity leadership for logistics and OT environments including warehouse automation and fleet tech.
• Drive strategic programmes across identity security, privileged access, encryption, data protection and secure AI.
• Maintain cybersecurity policies and control standards aligned with frameworks.
• Monitor regulatory/data-protection requirements and translate them into controls.
• Lead third-party security assessments, customer reviews and due diligence for transactions.
• Build a high-performing function and report cyber risk to leadership and governance committees.

Skills

Leadership experience

Multi-country experience

Security architecture

Cloud security

Incident response

Stakeholder management

Regulatory & data protection

Operational technology

Executive communication

Logistics/industry domain

Security certifications advantageous

Tools

SIEM

EDR

Threat intelligence

Job description

Key Responsibilities

• Own the Group's cybersecurity strategy, governance model and multi-year transformation roadmap across multiple markets.
• Establish a consistent cybersecurity operating framework covering governance, accountability, regional coordination, escalation and risk acceptance.
• Define the target security architecture across network, cloud, endpoint, identity, workload, email, web and data-security environments.
• Drive security-by-design across technology transformation, cloud migration, platform implementation and major system integration projects.
• Lead enterprise vulnerability, exposure and attack-surface management, ensuring risk-based prioritisation and timely remediation.
• Oversee security operations and engineering capabilities, including SIEM, EDR, detection engineering, threat hunting, threat intelligence and managed SOC services.
• Build and maintain a coordinated Cybersecurity Incident Response capability across the Group and lead response to significant cyber incidents when required.
• Strengthen cyber resilience through backup protection, recovery testing, business continuity and operational fallback planning.
• Provide cybersecurity leadership for logistics and operational technology environments, including warehouse automation, robotics, fleet technology and customer/carrier integrations.
• Drive strategic programmes across identity security, privileged access, cloud security, encryption, data protection, phishing resistance and secure AI adoption.
• Maintain cybersecurity policies and control standards aligned with recognised industry frameworks.
• Monitor applicable regulatory and data-protection requirements and translate them into practical security controls across relevant markets.
• Lead third-party security assessments, customer security reviews, cyber-insurance requirements and cybersecurity due diligence for corporate transactions.
• Build a high-performing cybersecurity function, manage external security partners and provide clear cyber-risk reporting to senior leadership and governance committees.

Requirements

• 12+ years of cybersecurity experience with substantial leadership responsibility.
• Experience managing cybersecurity functions across multiple countries, regions or business entities.
• Strong technical expertise across security architecture, cloud, network, identity, endpoint, vulnerability and security operations.
• Proven track record in cybersecurity transformation and security operating-model development.
• Strong experience managing significant cybersecurity incidents and coordinating cross-functional response teams.
• Experience working within matrix organisations and influencing stakeholders across different business units.
• Practical understanding of international cybersecurity, privacy and data-protection requirements.
• Experience with operational technology, industrial systems or business-critical technology environments is advantageous.
• Strong executive communication and stakeholder-management capabilities.
• Industry experience in logistics, freight forwarding, shipping, aviation, ports, rail or manufacturing is advantageous.
• Professional cybersecurity certifications such as CISSP, CISM, CCISO, GIAC, OSCP or relevant cloud-security certifications are advantageous.

Wecruit Pte Ltd

EA License No. 20C0270