Head / Lead, Cybersecurity

SCIENTE; Singapore; On-site; SGD 200,000 - 400,000; Full time

Job summary

SCIENTE is seeking an experienced cybersecurity leader to head the enterprise function, overseeing digital transformation, resilience, and compliance of ICT systems. The role drives strategy, governance, risk, incident response, and secure architecture while partnering with business and technology stakeholders to embed security by design across the enterprise.

You will shape security culture, lead critical initiatives, and collaborate with executives to align security with business goals and

Qualifications

• Bachelor's Degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technology discipline.
• 8–10 years of progressive experience in cybersecurity, information security, or ICT security management, including leadership responsibilities.
• CISSP certification.
• Proven experience leading cybersecurity initiatives across enterprise ICT environments.
• Strong expertise in security-by-design principles and secure solution architecture reviews.
• DevSecOps practices, Infrastructure as Code (IaC), and securing CI/CD pipelines.
• Cloud security across IaaS, PaaS, and SaaS environments.
• Cloud-native technologies including containers, microservices, and serverless architectures.
• Enterprise cybersecurity governance, security architecture, and operational security.
• Cybersecurity risk assessment methodologies and risk treatment planning.
• Security incident response, digital investigations, and cyber resilience.
• Cybersecurity technologies, frameworks, and industry best practices.
• Strong understanding of cybersecurity risks including malware, data leakage, compliance and regulatory risks, secure configuration management.

Responsibilities

• Lead the enterprise-wide cybersecurity function to support digital transformation initiatives while ensuring the security and resilience of ICT systems.
• Develop, implement, and continuously enhance the cybersecurity strategy, policies, standards, and work plans, ensuring alignment with the strategic business objectives.
• Establish and maintain cybersecurity governance frameworks, ensuring compliance with cybersecurity policies, standards, and best practice.
• Provide cybersecurity leadership across cloud adoption initiatives, including IaaS, PaaS, and SaaS.
• Assess cybersecurity risks associated with cloud-native technologies such as containers, microservices, and serverless architectures.
• Lead enterprise cybersecurity risk management through threat-based risk assessments, risk treatment, monitoring, and reporting.
• Govern and enhance the enterprise cybersecurity posture by maintaining visibility and oversight of ICT assets, security architecture, and cybersecurity operational practices.
• Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan and operational playbooks.
• Develop and sustain an enterprise-wide cybersecurity awareness, education, and training programme.

Skills

Leadership

Cybersecurity strategy

Governance & risk

Incident response

Security architecture

DevSecOps

IaC security

Cloud security

Container security

Stakeholder mgmt

Regulatory compliance

Education

Bachelor's degree

Job description

We are seeking an experienced cybersecurity leader to lead the enterprise-wide cybersecurity function in support of the digital transformation initiatives while ensuring the resilience, security, and compliance of ICT systems and digital services. The successful candidate will drive cybersecurity strategy, governance, risk management, incident response, and security architecture while partnering with business and technology stakeholders to embed security by design across the enterprise.

Mandatory Skill-set

• Bachelor's Degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technology discipline;
• Must have 8-10 years of progressive experience in cybersecurity, information security, or ICT security management, including leadership responsibilities;
• Certified Information Systems Security Professional (CISSP);
• Proven experience leading cybersecurity initiatives across enterprise ICT environments;
• Strong expertise in:
• Security-by-design principles and secure solution architecture reviews;
• DevSecOps practices, Infrastructure as Code (IaC), and securing CI/CD pipelines;
• Cloud security across IaaS, PaaS, and SaaS environments;
• Cloud-native technologies including containers, microservices, and serverless architectures;
• Enterprise cybersecurity governance, security architecture, and operational security;
• Cybersecurity risk assessment methodologies and risk treatment planning;
• Security incident response, digital investigations, and cyber resilience;
• Cybersecurity technologies, frameworks, and industry best practices;
• Strong understanding of cybersecurity risks including, Malware and ransomware, Data leakage and data protection, Compliance and regulatory risks, Secure configuration management and others;
• Strong leadership and stakeholder management skills with the ability to influence senior executives and cross-functional teams.

Desired Skill-set

• Certified Information Security Manager (CISM);
• Certified Cloud Security Professional (CCSP);
• GIAC Certified Incident Handler (GCIH),

Responsibilities

• Lead the enterprise-wide cybersecurity function to support digital transformation initiatives while ensuring the security and resilience of ICT systems;
• Develop, implement, and continuously enhance the cybersecurity strategy, policies, standards, and work plans, ensuring alignment with the strategic business objectives;
• Establish and maintain cybersecurity governance frameworks, ensuring compliance with cybersecurity policies, standards, and best practice;
• Provide cybersecurity leadership across cloud adoption initiatives, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS);
• Assess cybersecurity risks associated with cloud-native technologies such as containers, microservices, and serverless architectures;
• Lead enterprise cybersecurity risk management through threat-based risk assessments, risk treatment, monitoring, and reporting;
• Govern and enhance the enterprise cybersecurity posture by maintaining visibility and oversight of ICT assets, security architecture, and cybersecurity operational practices;
• Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan and operational playbooks;
• Develop and sustain an enterprise-wide cybersecurity awareness, education, and training programme.

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.