Head of IT Security GRC & Assurance – Regulated Finance

Charterhouse Partnership; Singapore; On-site; SGD 180,000 - 300,000; Full time

Job summary

Charterhouse Partnership in Singapore seeks an experienced cybersecurity leader to drive governance, risk and assurance across a complex technology environment.

Reporting to the CISO, you will lead a team of GRC specialists, strengthen policies and controls, and provide oversight of regulatory compliance, audits and cybersecurity assurance activities. You will influence senior stakeholders and partner with technology teams to secure hybrid cloud environments.

Qualifications

• 10+ years in IT security governance, risk, or compliance management, preferably in regulated environments.
• Proven experience leading teams and managing senior stakeholders.
• Strong knowledge of cybersecurity frameworks, risk assessment methodologies, security controls and audit management.
• Familiarity with Singapore cybersecurity and technology risk requirements, including MAS, Cybersecurity Act and Code of Practice.
• Understanding of secure architecture, hybrid cloud environments, CI/CD and DevSecOps.

Responsibilities

• Develop and maintain cybersecurity policies, standards and governance processes aligned with business priorities and regulatory requirements.
• Lead and develop a team of security GRC specialists, improving effectiveness through automation and process enhancements.
• Oversee cybersecurity risk assessments, security exceptions, and risk acceptance submissions, recommending appropriate mitigation measures.
• Provide oversight of vulnerability assessments, penetration testing, red teaming and tabletop exercises, ensuring findings are addressed.
• Monitor regulatory developments and translate requirements into practical policies and controls.
• Manage IT security audits, coordinate evidence submissions, and drive timely remediation of findings.
• Develop security metrics and key risk indicators, presenting insights and recommendations to senior stakeholders and risk committees.
• Partner with technology and business teams to strengthen security across applications, infrastructure, and hybrid cloud environments.

Skills

GRC leadership

Risk management

Regulatory compliance

Team leadership

Stakeholder mgmt

Cybersecurity frameworks

Audit management

Security controls

Education

Bachelor's degree in Computer Science / Information Security / Engineering

Job description

Charterhouse Partnership in Singapore seeks an experienced cybersecurity leader to drive governance, risk and assurance across a complex technology environment.

Reporting to the CISO, you will lead a team of GRC specialists, strengthen policies and controls, and provide oversight of regulatory compliance, audits and cybersecurity assurance activities. You will influence senior stakeholders and partner with technology teams to secure hybrid cloud environments.