Head of Cybersecurity - App, Cloud & Compliance (Hybrid)

Constructor Knowledge AG; Singapore; Hybrid; SGD 180,000 - 280,000; Full time

Benefits offered by this job

Choice of equipment

Flexible schedule

Remote work where no office exists

Hybrid work in offices (2 days in)

Job summary

Constructor is seeking a Head of Cybersecurity in Singapore to lead the security function across appsec, compliance, infrastructure, and business applications. This hands-on leadership role reports to the CTO and will grow a small security team, including security strategy and technical deep-dives.

The role includes securing CI/CD, managing ISO 27001 and SOC 2, and collaborating with DevOps on Kubernetes and cloud security. Based in Singapore with hybrid work (2 days in-office).

Qualifications

• 8+ years in information security, incl. 3+ years in a leadership role.
• Track record running application security programs with CI/CD tooling and AI-assisted reviews.
• Hands-on experience with ISO 27001 and/or SOC 2, with audit leadership.
• Experience securing business applications (M365, CRM, ERP) and vendor risk management.
• Ability to explain risk to engineers and executives.
• Comfortable leading a small team and prioritizing across demands.
• Working knowledge of Kubernetes and cloud security; sovereign cloud a plus.

Responsibilities

• Build and run AppSec program with AI-assisted reviews of code and PRs.
• Integrate security checks into CI/CD pipelines to catch vulnerabilities before production.
• Run developer security training and champion secure coding practices across the org.
• Evaluate and roll out AI coding tools to improve code security.
• Own ISO 27001 and SOC 2 certification and ongoing security audits.
• Build a roadmap for additional certifications as the business requires.
• Maintain scalable policies, controls, and evidence.
• Secure Kubernetes infrastructure and cloud environments, incl. sovereign cloud deployments.
• Define security standards for IaC, network, and access control.
• Partner with Engineering on secure-by-default configurations.
• Work with IT and Business apps to secure M365, CRM, ERP; manage identity/data protection.
• Own identity, access, and data protection across business apps.
• Manage third-party/vendor risk for SaaS.

Skills

Information security leadership

Security governance

Cloud security

Tools

CI/CD tooling

Kubernetes

IAM

Job description

Constructor is seeking a Head of Cybersecurity in Singapore to lead the security function across appsec, compliance, infrastructure, and business applications. This hands-on leadership role reports to the CTO and will grow a small security team, including security strategy and technical deep-dives.

The role includes securing CI/CD, managing ISO 27001 and SOC 2, and collaborating with DevOps on Kubernetes and cloud security. Based in Singapore with hybrid work (2 days in-office).