Head of Business Information Security & Cyber Risk

Kerry Consulting; Singapore; On-site; SGD 260,000 - 360,000; Full time

Job summary

Kerry Consulting is managing a senior cybersecurity leadership search for a multinational client. The role oversees risk, governance and assurance across regional businesses, working with technology, risk, operations and business leadership to translate security risks into business priorities.

The incumbent will lead a team of information security professionals, guide security programmes and collaborate with executive stakeholders across Asia Pacific.

Qualifications

• 15+ years in cybersecurity, information security or technology risk.
• Experience leading programmes across multiple countries or business units.
• Knowledge of governance, risk management, security assurance and controls.
• Familiarity with recognised cybersecurity frameworks and standards.
• Experience with Asia Pacific regulatory requirements; CISSP/CISM advantageous.

Responsibilities

• Oversee cybersecurity programmes and controls across regional markets.
• Assess risks, identify gaps and drive remediation.
• Provide governance and assurance across major technology initiatives and assessments.
• Monitor threat landscape; brief senior leadership on priorities.
• Coordinate with security operations, privacy, legal and risk during incidents.
• Oversee regulatory reviews, audits and related inquiries.
• Establish cyber risk metrics and reporting for governance forums.
• Lead and develop a regional team of cybersecurity professionals.

Skills

Cybersecurity leadership

Governance & risk

Stakeholder management

Executive communication

Team leadership

Education

Bachelor's degree in information security or related field

Tools

NIST CSF

ISO 27001

Job description

Our client is a leading multinational organisation with an established presence globally. As part of its continued investment in cybersecurity, the organisation is looking for an experienced security leader to oversee cybersecurity risk, governance and assurance across its regional businesses.

This is a senior role partnering closely with technology, risk and business leadership across multiple markets, providing strategic oversight of cybersecurity risk and security programmes across regional businesses.

You will work closely with senior stakeholders across Technology, Risk, Operations and the business to ensure cybersecurity risks are appropriately identified, managed and communicated. You will also lead a team of information security professionals supporting individual markets.

Key responsibilities:

• Oversee the implementation and effectiveness of cybersecurity programmes and controls across multiple regional markets.
• Assess cybersecurity risks and control effectiveness, identifying gaps and driving appropriate remediation.
• Provide security governance and assurance across major technology initiatives, including security assessments, vulnerability management and penetration testing.
• Monitor the regional cyber threat landscape and advise senior leadership on emerging risks and priorities.
• Coordinate with security operations, technology, privacy, legal and risk teams during significant cybersecurity incidents.
• Oversee cybersecurity regulatory requirements and support regulatory reviews, audits and related enquiries across the region.
• Establish meaningful cyber risk metrics and reporting for senior management, risk committees and other governance forums.
• Provide cybersecurity advice for major transformation initiatives, technology changes and corporate transactions.
• Oversee third-party cybersecurity risk and security policy exceptions where appropriate.
• Strengthen cybersecurity awareness and accountability across regional businesses.
• Build strong relationships with senior technology and business leaders, translating technical security matters into clear business risks and priorities.
• Lead, coach and develop a team of cybersecurity professionals.

Requirements:

• Approximately 15+ years of experience across cybersecurity, information security, technology risk or related disciplines.
• Strong experience leading cybersecurity programmes across multiple countries or business units within a large, complex organisation.
• Broad understanding of cybersecurity governance, risk management, security assurance and technical security controls.
• Good knowledge of recognised cybersecurity frameworks and standards.
• Experience working with cybersecurity regulatory requirements across Asia Pacific.
• Strong understanding of areas including application security, infrastructure security, vulnerability management and cyber incident management.
• Proven ability to engage senior executives and communicate cybersecurity risks to non-technical stakeholders.
• Previous experience presenting to senior management, risk committees and/or Boards would be advantageous.
• Experience within financial services or another highly regulated industry would be preferred.
• Relevant certifications such as CISSP, CISM or equivalent would be advantageous.
• Strong leadership, stakeholder management and influencing capabilities.