Head of Cybersecurity GRC & Data Protection

DBS Bank Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

DBS Bank Ltd is seeking an experienced cybersecurity governance professional to lead regulatory compliance, awareness, and data protection. You will develop standards, assess risks, and report to risk committees while driving the bank's cybersecurity program across regions.

The role focuses on governance, training, data protection, and metrics reporting to senior management and the Board, with a strong emphasis on collaboration with Enterprise Data Security and Risk teams.

Qualifications

• 15+ years of information security experience in financial or technology environments.
• Experience implementing programs to collect, manage and report security metrics and incidents.
• Knowledge of ISO27000, NIST 800-53 and regulations such as Cybersecurity Act and PDPA.
• Strong background in security technology including IDS/IPS, secure email, VPN and log analysis.
• Good communication skills and ability to drive governance across regions.

Responsibilities

• Drive regulatory compliance and governance for cybersecurity within DBS.
• Develop standards, assess risks, and provide assurance to risk committees.
• Lead cybersecurity awareness and training programs for stakeholders.
• Oversee data protection program including data loss prevention and analytics.
• Produce security metrics and reports for senior management and the Board.

Skills

Information security

Regulatory compliance

Security analytics

Security metrics reporting

Training & awareness

Tools

IDS/IPS

SIEM

Data loss prevention

Machine learning security analytics

Job description

DBS Bank Ltd is seeking an experienced cybersecurity governance professional to lead regulatory compliance, awareness, and data protection. You will develop standards, assess risks, and report to risk committees while driving the bank's cybersecurity program across regions.

The role focuses on governance, training, data protection, and metrics reporting to senior management and the Board, with a strong emphasis on collaboration with Enterprise Data Security and Risk teams.