Head / Lead, Cybersecurity

SCIENTE; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

SCIENTE is seeking an experienced cybersecurity leader to head the enterprise-wide cybersecurity function, supporting digital transformation while ensuring resilience, security, and compliance of ICT systems and digital services. The role partners with business and technology stakeholders to embed security by design across the organization.

You will drive strategy, governance, risk management, incident response, and security architecture, with a focus on cloud security, DevSecOps, and secure

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or related technology discipline.
• 8–10 years of progressive experience in cybersecurity, information security, or ICT security management, including leadership responsibilities.
• Certified Information Systems Security Professional (CISSP).
• Proven experience leading cybersecurity initiatives across enterprise ICT environments.

Responsibilities

• Lead the enterprise-wide cybersecurity function to support digital transformation initiatives while ensuring the security and resilience of ICT systems.
• Develop, implement, and continuously enhance the cybersecurity strategy, policies, standards, and work plans, ensuring alignment with the strategic business objectives.
• Establish and maintain cybersecurity governance frameworks, ensuring compliance with cybersecurity policies, standards, and best practice.
• Provide cybersecurity leadership across cloud adoption initiatives, including IaaS, PaaS, and SaaS; assess cloud-native risks.
• Oversee enterprise cybersecurity risk management through threat-based risk assessments, risk treatment, monitoring, and reporting.
• Develop and sustain an enterprise-wide cybersecurity awareness, education, and training programme.

Skills

CISSP

Cybersecurity leadership

DevSecOps

Cloud security

Security architecture

Governance

Risk assessment

Incident response

Education

Bachelor's degree in Computer Science / Information Systems / Engineering / Cybersecurity

Job description

We are seeking an experienced cybersecurity leader to lead the enterprise-wide cybersecurity function in support of the digital transformation initiatives while ensuring the resilience, security, and compliance of ICT systems and digital services. The successful candidate will drive cybersecurity strategy, governance, risk management, incident response, and security architecture while partnering with business and technology stakeholders to embed security by design across the enterprise.

Mandatory Skill-set

• Bachelor's Degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technology discipline;
• Must have 8–10 years of progressive experience in cybersecurity, information security, or ICT security management, including leadership responsibilities;
• Certified Information Systems Security Professional (CISSP);
• Proven experience leading cybersecurity initiatives across enterprise ICT environments;
• Strong expertise in:
• Security-by-design principles and secure solution architecture reviews;
• DevSecOps practices, Infrastructure as Code (IaC), and securing CI/CD pipelines;
• Cloud security across IaaS, PaaS, and SaaS environments;
• Cloud-native technologies including containers, microservices, and serverless architectures;
• Enterprise cybersecurity governance, security architecture, and operational security;
• Cybersecurity risk assessment methodologies and risk treatment planning;
• Security incident response, digital investigations, and cyber resilience;
• Cybersecurity technologies, frameworks, and industry best practices;
• Strong understanding of cybersecurity risks including, Malware and ransomware, Data leakage and data protection, Compliance and regulatory risks, Secure configuration management and others;
• Strong leadership and stakeholder management skills with the ability to influence senior executives and cross-functional teams.

Desired Skill-set

• Certified Information Security Manager (CISM);
• Certified Cloud Security Professional (CCSP);
• GIAC Certified Incident Handler (GCIH),

Responsibilities

• Lead the enterprise-wide cybersecurity function to support digital transformation initiatives while ensuring the security and resilience of ICT systems;
• Develop, implement, and continuously enhance the cybersecurity strategy, policies, standards, and work plans, ensuring alignment with the strategic business objectives;
• Establish and maintain cybersecurity governance frameworks, ensuring compliance with cybersecurity policies, standards, and best practice;
• Provide cybersecurity leadership across cloud adoption initiatives, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS);
• Assess cybersecurity risks associated with cloud-native technologies such as containers, microservices, and serverless architectures;
• Lead enterprise cybersecurity risk management through threat-based risk assessments, risk treatment, monitoring, and reporting;
• Govern and enhance the enterprise cybersecurity posture by maintaining visibility and oversight of ICT assets, security architecture, and cybersecurity operational practices;
• Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan and operational playbooks;
• Develop and sustain an enterprise -wide cybersecurity awareness, education, and training programme.