Group Head of Cybersecurity (MNC / East) [EL]

WECRUIT PTE. LTD.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Wecruit Pte Ltd is seeking a senior cybersecurity leader to define and implement the group’s global operating model and to drive regional coordination across markets. The role requires advanced expertise in cybersecurity architecture, network and cloud security, IAM, and threat management.

You will lead security operations, incident response, vulnerability management and governance, building resilient systems and overseeing cross-border security initiatives for the organisation.

Qualifications

• Significant experience in leading technical security teams across multiple markets/regions.
• Strong knowledge of cybersecurity architecture, network security, cloud security and IAM.
• Proven incident response leadership and risk-based security prioritisation.

Responsibilities

• Define and implement the group’s global cybersecurity operating model including governance and escalation protocols.
• Develop cybersecurity architecture and strategic roadmap including zero-trust, endpoint, cloud and data protection.
• Establish consistent security baselines across critical systems and privileged-access environments.
• Lead security operations covering SIEM, EDR, threat hunting and managed SOC performance.
• Oversee incident response with playbooks, escalation procedures and cross-regional coordination.
• Act as Incident Commander for significant cybersecurity incidents and regulatory notifications.
• Strengthen cyber resilience with backup standards and business-continuity measures.
• Develop cybersecurity controls for OT and logistics environments.

Skills

Cybersecurity architecture

Network security

Cloud security

Identity and access management

Endpoint security

Threat intelligence

Vulnerability management

Executive stakeholder management

Job description

Responsibilities

• Define and implement the Group’s global cybersecurity operating model, including governance, decision rights, responsibilities, escalation protocols and regional coordination.
• Develop the Group cybersecurity architecture and strategic roadmap covering network security, zero-trust access, endpoint and workload protection, email and web security, cloud security and secrets management.
• Establish consistent cybersecurity control baselines across critical systems, operating entities and privileged-access environments, supported by formal exception and risk-acceptance processes.
• Provide security leadership for new technology platforms, system integrations, cloud migrations and digital transformation initiatives.
• Lead vulnerability and exposure management, including asset discovery, vulnerability assessment, risk-based prioritisation, remediation standards and external attack-surface management.
• Oversee security operations covering SIEM, EDR, detection engineering, threat hunting, threat intelligence and managed SOC performance.
• Establish and lead a Group-wide Cybersecurity Incident Response capability, including common playbooks, severity classifications, escalation procedures and coordinated response across regions.
• Act as Incident Commander for significant cybersecurity incidents, coordinating containment, recovery, investigation, executive communication and relevant regulatory or stakeholder notifications.
• Strengthen cyber resilience through secure backup standards, recovery testing and business-continuity measures for critical systems.
• Develop cybersecurity controls for operational technology and logistics environments, including warehouse systems, automation, robotics, transport platforms, fleet devices and EDI/API integrations.
• Lead identity, cloud and data-security initiatives, including MFA, privileged-access management, encryption, key management, data-loss prevention and secure AI adoption.
• Maintain Group cybersecurity policies and standards aligned with recognised frameworks such as ISO 27001 and NIST.
• Translate applicable cybersecurity, privacy and cross-border data requirements into practical technical and operational controls.
• Lead third-party cybersecurity risk management, customer security assessments, cyber-insurance reviews and security due diligence for acquisitions.
• Build and develop the Group cybersecurity function, coordinate regional security resources through a matrix structure, manage the cybersecurity budget and provide risk reporting to senior management and relevant governance committees.

Requirements

• At least 12 years of experience in cybersecurity, including significant experience leading technical security teams across multiple markets or regions.
• Strong technical knowledge across cybersecurity architecture, network security, cloud security, identity and access management, endpoint security, vulnerability management, SIEM, EDR and security engineering.
• Proven experience developing or transforming cybersecurity capabilities within a geographically distributed organisation.
• Demonstrated experience managing major cybersecurity incidents from detection and containment through recovery and remediation.
• Experience coordinating internal security teams, external forensic specialists, legal advisers and managed-security providers.
• Strong stakeholder-management skills with the ability to influence regional and country teams within a matrix environment.
• Working knowledge of major cybersecurity and data-protection frameworks and regulations.
• Experience in operational technology, industrial systems or environments where system availability is critical will be advantageous.
• Strong communication and executive stakeholder-management skills.
• Experience in logistics, freight forwarding, shipping, aviation, ports, rail or manufacturing would be advantageous.
• Relevant certifications such as CISSP, CISM, CCISO, GIAC, OSCP or cloud-security certifications would be advantageous.

We regret only shortlisted candidates will be contacted. All applications will be handled confidentially. By submitting your application, you agree to the collection, use, retention, and disclosure of your personal information to prospective employers.

Wecruit Pte Ltd

EA License No: 20C0270